79][T11623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.125735][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 303.125799][ T32] audit: type=1804 audit(1586576743.788:120): pid=12039 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/0/bus" dev="sda1" ino=16124 res=1 03:45:43 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r6, 0x0, 0x6}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e21, 0x1f, @mcast2, 0x8}}, 0x2, 0x0, 0x7, 0x6, 0x1ff}, &(0x7f0000000100)=0x98) 03:45:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)={0x3, 0x1}) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:43 executing program 0: 03:45:43 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x161042, 0x2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3c3e2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) eventfd2(0x0, 0x80800) 03:45:43 executing program 4: 03:45:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) [ 303.183785][ T32] audit: type=1804 audit(1586576743.848:121): pid=12039 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/0/bus" dev="sda1" ino=16124 res=1 [ 303.394507][ T32] audit: type=1804 audit(1586576744.018:122): pid=12046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/103/bus" dev="sda1" ino=16138 res=1 03:45:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:44 executing program 0: 03:45:44 executing program 4: [ 303.641848][ T32] audit: type=1804 audit(1586576744.148:123): pid=12056 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/103/bus" dev="sda1" ino=16138 res=1 [ 303.667084][ T32] audit: type=1804 audit(1586576744.158:124): pid=12046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/103/bus" dev="sda1" ino=16138 res=1 [ 303.692124][ T32] audit: type=1804 audit(1586576744.188:125): pid=12046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/103/bus" dev="sda1" ino=16138 res=1 [ 303.718445][ T32] audit: type=1804 audit(1586576744.188:126): pid=12056 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/103/bus" dev="sda1" ino=16138 res=1 [ 303.743712][ T32] audit: type=1804 audit(1586576744.208:127): pid=12057 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/1/bus" dev="sda1" ino=16097 res=1 03:45:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) [ 303.769237][ T32] audit: type=1804 audit(1586576744.298:128): pid=12046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/103/bus" dev="sda1" ino=16138 res=1 [ 303.794683][ T32] audit: type=1804 audit(1586576744.308:129): pid=12046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/103/bus" dev="sda1" ino=16138 res=1 03:45:44 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:45:44 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r6, 0x0, 0x6}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e21, 0x1f, @mcast2, 0x8}}, 0x2, 0x0, 0x7, 0x6, 0x1ff}, &(0x7f0000000100)=0x98) 03:45:44 executing program 4: 03:45:44 executing program 2: modify_ldt$read(0x0, &(0x7f0000000040)=""/83, 0x53) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:44 executing program 0: 03:45:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:45 executing program 4: 03:45:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x5) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:45:45 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) r1 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2880, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r1) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:45 executing program 0: 03:45:45 executing program 4: 03:45:45 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r6, 0x0, 0x6}, 0xc) 03:45:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:45:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x6, 0xffffffffffffffff, 0x1000, 0x1, 0x1, 0x1}, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r5) fchown(r0, r3, r5) 03:45:45 executing program 0: 03:45:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000080)={0x1, r3}) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 03:45:46 executing program 4: 03:45:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x541100, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:45:46 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 03:45:46 executing program 0: 03:45:46 executing program 4: 03:45:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @remote}], 0x20) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="d8f0dc9445788817e6aeed6db73bf84ece332898ff3d16d69afb03181ae5"], 0x1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x3, 0x1f, 0x3, 0x7, 0x0, 0xfff, 0x1, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0x2, 0x7f}, 0x10044, 0xfffffffffffffff7, 0x3e, 0x8, 0x5, 0x3, 0x4}, r4, 0x2, r3, 0x2) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:46 executing program 0: 03:45:46 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r6, 0x0, 0x6}, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e23, 0x1, @remote, 0x6}}, 0x7, 0xf000}, 0x88) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:45:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:45:47 executing program 4: 03:45:47 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) 03:45:47 executing program 2: r0 = socket(0xa, 0x803, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @dev={[], 0x32}, 'ipvlan0\x00'}}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x40000) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010040507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x4}}, 0x0) 03:45:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x74}}, 0x0) 03:45:47 executing program 0: 03:45:47 executing program 4: 03:45:47 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x301741, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x1000) 03:45:47 executing program 4: 03:45:47 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000806010400000000000000000000000005000100070000003628eb860b4597485d55f8c57b1f41a2f46e4da05b0cd1ee0e6bcb92a664a27ccf8d69f78f714a817198c7bfdaf214ff6e9e3b73c168ec2477b2ac1b733bfe705412d5c6c3b9a0bf55c7f91102edb779060c7518e95e36c6ec9805a9421d5cbaf7af81e3b72273a110edab57cb857e1bc221a9338114ff35f9641ad6d3fa5d87249155800235bfb9ca5bc1481a8ad1d22d10a092de3fe3f75fb6e4ab8e7de1ca04ae8cbc9eddd6348983f77e4e5da0cb6b8e395a063934e18ee8169191f4699e66b3fbebf564d2f5afc10b97c8d58c0d8c9bc2891be8ffd9f51f37496db797191bdf0d49d8e3f8793e2e1c537b1bb91cfca4d684a7740f5fb1b44c10f98ffae55fda22cc76f10ba3e80c64002403871ea4fa87ef6aabb8dd78b1ec05c7da6d551c88555d8ef34d9cbda3550b723bac9492123b364664565c2b"], 0x1c}}, 0x0) socket(0x2, 0x80805, 0x0) 03:45:48 executing program 0: 03:45:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x74}}, 0x0) 03:45:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0xb) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:48 executing program 4: 03:45:48 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000004, 0x3812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000040)) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:45:48 executing program 0: 03:45:48 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 03:45:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x74}}, 0x0) [ 308.139879][ T32] kauditd_printk_skb: 37 callbacks suppressed [ 308.139943][ T32] audit: type=1804 audit(1586576748.808:167): pid=12221 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/109/bus" dev="sda1" ino=16169 res=1 03:45:48 executing program 4: 03:45:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$sequencer(0xffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x121b02, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) connect$pppoe(r5, &(0x7f0000000140)={0x18, 0x0, {0x2, @random="6c4d14ee0859", 'gretap0\x00'}}, 0x1e) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r6, 0x0, 0x6}, 0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000240)={r7, 0x0, 0x1000, "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"}, 0x1008) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:49 executing program 0: [ 308.425910][ T32] audit: type=1804 audit(1586576748.968:168): pid=12227 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/109/bus" dev="sda1" ino=16169 res=1 [ 308.451219][ T32] audit: type=1804 audit(1586576748.968:169): pid=12221 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/109/bus" dev="sda1" ino=16169 res=1 [ 308.475764][ T32] audit: type=1804 audit(1586576748.968:170): pid=12220 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir681891824/syzkaller.HgbSib/116/bus" dev="sda1" ino=16168 res=1 [ 308.500835][ T32] audit: type=1804 audit(1586576748.968:171): pid=12221 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/109/bus" dev="sda1" ino=16169 res=1 [ 308.525356][ T32] audit: type=1804 audit(1586576748.978:172): pid=12227 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/109/bus" dev="sda1" ino=16169 res=1 [ 308.550479][ T32] audit: type=1804 audit(1586576749.078:173): pid=12227 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/109/bus" dev="sda1" ino=16169 res=1 03:45:49 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = openat$cachefiles(0xffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0xc8840, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x20100, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x3f, r7}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r8, 0x0, 0x6}, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={r8, 0x5, 0x2, [0x3f, 0x4e4]}, &(0x7f0000000100)=0xc) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000040)={0x7, 0x6027, 0x7, 0x2, 0x9, 0x40, 0x3f}) 03:45:49 executing program 4: 03:45:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:45:49 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) socket(0x10, 0x80002, 0xc) 03:45:49 executing program 0: 03:45:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ftruncate(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000140), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3a0660061312386e644283f3fbe07de8b4b0252cc5c1b529f5d5bb879ee20de55b89fa816436d1f63232ea015c554cae34552c24ba174b23cf918a60ed9773e441f9da584261d7d5e6783866e5a20ae0b6ba369f39f43d5a146cc263b2d6c7b431196331c168b9930ea1ab3c0297f8539a8f577f12f23ed75c8a8f7fbef9df9fce507e43d8cf0f1c0754f1d07a31ef40ff5e8ee2a05ed0023824b2"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:49 executing program 4: 03:45:50 executing program 0: 03:45:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:45:50 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 309.562125][ T32] audit: type=1804 audit(1586576749.298:174): pid=12231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/7/bus" dev="sda1" ino=16175 res=1 [ 309.587283][ T32] audit: type=1804 audit(1586576749.398:175): pid=12239 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/7/bus" dev="sda1" ino=16175 res=1 03:45:50 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x181401, 0x197) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 309.612158][ T32] audit: type=1804 audit(1586576749.608:176): pid=12245 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/110/bus" dev="sda1" ino=16177 res=1 03:45:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="f9e947193cdff14120a19a858022ab709da60138ddaba9d81b0c40b65d70558bcb97a1fc1f48e4bd0b3ebb9c9adfea52cbb47f81e7c3187c3a69c6750498a8963efde8fdf5324ea6e4fbb1bb2189c7f6339ac0316b76bffc88f0ba6d14d30ac9161619a03d869c4d1d4a1da80fc7"], 0x1) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x80, 0x7f, 0x72}, {0x400, 0x1, 0x5, 0x1ff}, {0xe0, 0x3f, 0x97, 0x4}]}, 0x8) openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) 03:45:50 executing program 0: 03:45:50 executing program 4: 03:45:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:45:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(0xffffffffffffffff, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="d79c6ec9d7fb1f6a004ef6df86f74d664d556ae9d1d003d97e9529448dcfc07d627c8e0d1f93f40c14c8c5e022a419bc60a17e993e96b125f364dc46237eb7a0dc0e3312e944610fd9672f8d3ec67ae0bc71afae8ef7967b3575f1dc6e2714b8b549985256b38b8dc763b64d63a556ff40de1a13", 0x74}, {&(0x7f0000000280)="d32602eb2c0a78eef2fdf1a18faf935305ab3121d9f22c516f933e7f68363aaf478ad654d2ae26548396d58b0184b4e1c5ae7dffeb500f82f0251b9bb29973d8e0d0c3999839610939b3316860db72fa785d7714b5a3d5dd8e20e9d7de16412b0713372afbdbd352022281e4a5fbc515f1c08151e92dfc9d108dd7a92d664cc621e40caf9d86f0b023344b1210ebba45ad5e8baaf2889285650a259c14cc6136eb1b5fb6c1f1e131b66c70f4656a8568f0235423b374", 0xb6}, {&(0x7f0000000340)="f021a0941b9762e25a40138216cf7c8460f897d6bef3cd2bb18b8db959100a3b53d1a2299f10f7608cb32692a6d0805148b14087fdaab477", 0x38}], 0x3}}, {{&(0x7f00000003c0)=@vsock, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000440)="b02d57e3e787668ed5b6b28d979aafd14bef7ec7853e06fc0aee2a5aa860bc03546b861efab1d61597e87af16c0b4b4706f465cef81ab07c96f2e14699a610779363d9721627d012d6c2cc95929337b40ae2caf8bc6d17499204a2260de9ba219a435bff5cc80046d0fe5477632a8bf4a987198cb2d037e098ace2653de114707ac67175e2dc1e6a44afa6b4c90886564f71de09c41d", 0x96}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="20214662bf1b0ba545102609bcd100b5ba1a9a373b6eba16d3c7efd1d1fadf06b7d7062e9140ec12a67d7a8bd4ec4731f84696789e3d34377435ed86ce14d29922dfdbca149d1d7834e5f129ce1312fcdd6c7e1ecd96d800f69c823ae4767404838982656379801ed56276270b1a213398ec4021a2568ebcf84a", 0x7a}, {&(0x7f0000001580)="1fdb8c906b6621506bcab61a608ebd26dfd44be2de8c6e0870a8d5e7ccf525d1b69095ac90fc7100b3c4a9fb65bcd9e82151d83708a7184c87d4bafefa29e56c", 0x40}], 0x4, &(0x7f0000001700)=[{0xcc, 0x96, 0x1f, "cc0634ca5d2e1577531f9850c1b83dbdc0b39796aeb0c1968e63972487d1f2a0614c6ec99c239a3a7d4b5d79f89458077c20a124030453f8d29b1dd7f179ce4696baa1cb191a7a39a589a7a737ebe109121240ae502fccef1344efac2ea0b405f24f373f8595063b3f37859a4957a1d90a44a1d76b457e352a7e7d2199304068aa9e7bcae420352ee86f2bd17ec7e79bf5850eaa1f31427e4d7773e7b317e2d57eb32ecf6731b04fd0ba285138d2a4cb444528ac9bad026c48a9b0895bdd"}, {0x104, 0x10e, 0x21, "1732faba9d59a39b30de81d9cc6b8b084acfc61379e113449113f059e851d98206f4dc39ee87425ebac5f553586af063762f652a4450e666c0f1d412067765a2335e87b83c926cfc86e4fdfcd07d9a71c8556f053a484d073215c2dd4558a3c28544d585388ae1651a8efa878e6e6c1b7e5e2f4fb2b0c485107ed3a49d186cc0d789206c8e106d94eb3d4467d8efd86b89aed4b3680827f7d2d89543d2203a55c0e4d8b9ca5ecdec0c9fa759ed16e9f7313ab616ffe6204441a598c0c09e5670e13c3ca5d58578d1a7389ce4d6ef4882a7664038debb62e456dfa4ff37fa5653a604279f2a8952f93e02bbae62a9966632c68f6d0a180132"}], 0x1d0}}, {{&(0x7f0000001900)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001980)="26d61455f6dd50f50e6ead4846314f43896b9c2d128d803d19a3a94a6af5e7d13e72fae5d0dfe8d65685c69b30e15fb17524e7d0a95ee956f2103bce308d235f6222589a8d927d0d97e3c80934ae36ae0ae01a3714b57d614adbd1cca94037850a4a861a4136df9d917ce691a4730880d0febf490f28ca558dc971f6692b5a16a15f496c59de2b0f71bb4b66127029bcbe8d808857da6183d27a47b5ca5a2cab3cb6a9c241946b61467129cf0e1e7c06c26944a9ebb9923a7348d3b60beb6b401a9cc052171e7c78ef2ade522142f0cea293a70f71ee4b3e4500d4a5dca41dd88a39c498c1eaa1e01b017c1e3146145ca30a373c3fa3", 0xf6}, {&(0x7f0000001a80)="450ef568e00080d30318d3fb7cfd34476e95acb06eb01904d0f54597752bc768f521c52b1bb0027258d3cede625d3a656bdc7bee363a2dfaeb0ea8e73d289287dfe0a448a2296995275f00b7587ce26e240bf66c8a31bf8f40a33167f91e855766a9db8315c17a401dd1741f658eff673fb70aba3183953fd03fda73ac274213c1e211d5f5596f40c1d2d250868d6c88eb512a33fc97569c855c463dd7789dd7c72b50a15bbe31eed4505eceb07d2409174fcdee553b91c5cab13051b00186e0a5a17981bee2011740", 0xc9}, {&(0x7f0000001b80)="03255312fd683f441b59ff2c57e0272a06f7e7029eff91bb2a69e7a07b29eae19129a0fe2ad88e6f3a720ae529e01e85d7d3991256b7931e1767599e48a2f8fddefae2850682b3", 0x47}, {&(0x7f0000001c00)="d2280b9ffda9eac580dbaeaecd8a6bd09470e475f47d91cb7f6e6c1dc1efb56ea9417514813087f8c46d2cfb498606376df9f1ad7def0c894c064c0758fa2bfa619d48edad167c7418f953ecdeb100805795a4959a0eb7ee2c", 0x59}, {&(0x7f0000001c80)="f00dd2594be6dd4be301a0a3a8a311892200a102c2083ab510b95c827dc7da5c12f334a6cf9328927c3039dc7f7dc4ba81b7565bf978f420e9d9bae40f80a0d060ffd809c812090b64134b11c8ffdae3f90d25da45dc4ce5f267304d9202c73645ec893eb2ffd6894c121158b31d83f3d26b9e32fa5f76c33a05561569a34e051202e5e62775210380c54315fb1b46e0a2e89ce6afc08fec22b3f0391a0a3b26c6b19a1e29c2e2f18eb190186e2a58", 0xaf}, {&(0x7f0000001d40)="362e746ee85eb61b2663b5abba00cf0f7b39732717f3e7e3c9d0117f4312fa660d8df8e3060dd66cd26814c6ea4a2c8f9a63da77312eec2161b0539114416f39fbabce64b51ce82914b1bb878eff9c4c611a85288bea2d0f397f562214cadb0cbed5cba4b9ab29455eda08147f8d78583bcefdad16e39c4ee2ee095da87fa5b51c9d3cf7f32949d4ac1b4aa489ba260be916ea3a1c2587e3f7403c762a7c53", 0x9f}, {&(0x7f0000001e00)="49e5e37d2acaa24b7907b6e59d2a90ba1a151b26589e8e736153e5d80b3a46f97f74d2a8d9d2a07ee09f6ead27ce02f4ce80bbbd00117ef3ec30cf9ea66dc016d5fbc67fd13042671e126b13cef8242eab7972", 0x53}], 0x7, &(0x7f0000001e80)=[{0x44, 0x10e, 0xfffffff9, "6affcc3992d7e42b6b939801a9f8365bcb4f1089bd130d6653ab4bbcf97863d9ee5002d5780c69ce3c57d28134d8177322c32493ad"}, {0x30, 0x11, 0xff, "19292bca1b43365913c80b5d93cdd4da04b3c6d3ef958c69355c8a081df68a699e8067"}, {0x88, 0x10c, 0x1, "681740b83bdbb03d2248350fc9137f90a8c8ef5a94d3a9d72ef455640179d0b07e3a84e4a03fc548c5159d90676b278c41ac8fcfb6343fd1243341251a8926ce0c3a2630c77eca6d4bee8a91d9e63f2d52c355cb2ce0b4210c3b3caff7cc40e1158ca8064ed913af20fba459ef657d29fc6dc3a1a596bbf68e748c"}, {0x38, 0x115, 0x6, "931d420b66f9f56420f3d2690af85f64276d1f467ae0f6f1a131c4469c0cf44bde4beb8b01ae5f65039fdb"}, {0xcc, 0x104, 0xad6, "4ea1e0a0d9fbf1d1c7188e0885141cfabb1e1b88d8020ee5d784e75976b690442e036320b6e415a8dbbbe3896d8e16a167428b073cbc38bbcfec37a440466a056b0641901da15d8564318fec3731d53a3cc71e734b1d4e8ea7ae1852e833803c58aee26b1ff91d47b534592bc00897d33a747c7ee2f0a0cdca5476044ca39d2db4cd4111693779fdc56ebe2747480b002748fc9ab1f4d15a0ddda5765f6e170932210d2a00da38677ac2a22a69e3bb54ade9dd1d0c80d15023862ffac4"}, {0xf8, 0x112, 0x3, "28888efb33049e0954a55fd3c06e0c5c30f53668bb131dde938eb1aeed7f261eb803b6e1819a5fb9022be82a43bb6eb5ce1e7ec9cc2b6f5c86340694aa74508f909b95d3bfac8053ff2b0eb7b59ca07ac3010a7fad1af028eaf2df4cc6024ac24cb78cfb0019226b38cac29f998ab6b14e3ab39f0ef50027174a6078e7d38bcdc178e2f99df8ec9226fee46a1b7e6ea432fd709a5e288f03576f15de91960e42e13ce71a92bc66b0e9804fa2e48e39224911d0789084d4d0a230ce415058e7a466a0b9e9036e82ff2836d2c3cb7b07b8e1bca027adea871ec590a2b013db6930ad0a4bffeeab6f372b"}, {0x60, 0x100, 0x7, "f19780cde434255d6718a2f12110166c4b449855edcba7879040a3063f1d6859b32f742ab8937b746b0de79fd3dbfb62815646a4f7c4d2bb0472424b53ff6d24c21cbd495786420cfeb7ebc2bd8ee1cd9fc5"}, {0x34, 0x29, 0x10001, "4b9223474cadaff17fa297e094a2cb0ee04315e6a6105448dec44957bf61aeeabad7d275e1"}], 0x38c}}, {{&(0x7f0000002240)=@can={0x1d, r3}, 0x80, &(0x7f0000002440)=[{&(0x7f00000022c0)="86c8e6bd0f173ec6cc1265ca7f84d4271916b0a0166fcbcfbbcacaca0bea442fdf7188601e1053d8e77bd94d236ebcd9f42aa463192c1ac64c3680e4748d0adcc12c2485ed6b7d251313b484b59a834f20e3be1a9f768d10a52b762449954e71079e0ac0be98f639ee4f3f0aa776", 0x6e}, {&(0x7f0000002340)="a54ca5755aec8ca5f89023de056402e6670d6a8a3ee9d80f3a7612f84e2c2efcc5a0d0f1ac552bba3bb6c7d61063df95612e6861a7c01c6fff580ccc68ac1aa0a46b0f91b05df319aeeb45375cf2f592fd457ea45eced03f32ff72641f5432a44c1a88bf346d9b04a6350834ab0830a6a04bd95ce450d6f4dc8b850a3d05d7c5e7e8f3a6dfd0a3cce722c982e50ae307acd5b16b1f2e534714d6bf07fac6201bcba1d01fbd807e4906a94c51293a5290f5b091db2f094046d8a016fddb34b870d2c34cff7afd7efcb731b8ea249f0cb9a8f489d0771fe8e2f6812e559e4cc1", 0xdf}], 0x2, &(0x7f0000002480)=[{0x24, 0x103, 0x1, "20b5f2e42629b5586417938acaf55503cb8eb91cc411"}, {0x74, 0x110, 0x1, "b577a9b5400b547ba3c299d5c57f178acc53ec16ce56c839a6021dfdd45736f8dfa35262bd4c25151540b66e38573f683b6e1d02bdbda35c33ca7599f220ccc99a0725480f27b69f78e22470732bd31a0ff30a2ef82a670c09d8d0b94b16c63b15631c8e87"}, {0x1c, 0x10b, 0x10000, "bda5d118f6dc360af620eb55c0"}], 0xb4}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002540)="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", 0x1000}], 0x1, &(0x7f0000003580)=[{0xd8, 0x118, 0x8, "236b37d6d2989331d3e66a7e136490dbf335f243c1c0f886b0ac3ed0cc444ff4c08cbf9571a25337b655c01fa8f2126ce180cbfe630106c470d71d382ac708e11af75b7441491dc06cc73ed953c6c007f7bd001ebd7e43d987e9f4e5fc9d49853583bfe07428335f68f2594d5b022e9c6ad734c5b5e863ec48b22b8b5265a490d7f1ebd53280f07c79717a6faab293a7af65187b129c73c618f18bea34eed3df8f9abd9a46d8fab5cab7a53df13bea200407b8b33b7f1b851f525679fbdec7738695b2e3e52034de885f9f89"}, {0x74, 0x117, 0xffffffff, "b78aec60e28009cca6650da9f27c76c4305dffa5e42180c97012e49f6ddfafe73fa69e02a6da62a2bf6c22fe00980208dba1d76f0e745735f0cbb29aa63d708bd2fd9ae370811d5739e3f632125c71f4be52549cebdc7823a1390a8aa2aadd90cfb3ce75e6ca42ae"}, {0x20, 0x112, 0x4, "9f9e04c55fb37ea473f5f486008c02607ade0c"}, {0x28, 0x13, 0xf905, "c4894c13406d2acaa42ad5f9c0dcfd364c9d3e060fe3f1e2f57bb032"}, {0x48, 0x100, 0x7, "d67fb58623fda819500cc7c2f130ea46e0d2c64ed086666de1afa72b90e5ea220b792c56bae562e84bc5feb3bfd6ec9c7cce3d12afe10e8c05419066"}, {0x100, 0x108, 0x9, "8d3351dccfd066d729638db66c865941c2377a506c363ca13095dbd97a0f64947f11d9bcf3c90c49becdb17cf6091dad4c0c87251d005757e53427e7213dcb9e32ef0ec0bc14fa371af5948af1300633772a381ef975bc3ba9917b61cf709b9002dde146a95ed7e64d297073de6ba886ca2eb37e7c92831fb67a468e88b8d4726cdf8e439dab5c4cb80a41fc36b49115fd670e48ec441309b25170686d494400edfab7412f316acdde3ed12bd1699aac17f807c53f2eb7366283253b00b5e87770b08de096b6fd96b954f955c28f0d0df18e15ed554df775f0cabb090625b6c3dfb3c9e4dd44966819b0d8f4dc199e6c10ed3ab1"}, {0x98, 0x118, 0xfffffff9, "215c7e37b7d438157c7cf69389e4f0a39e80776740afaf5f0195c4aa66b1215010e60029b53a8d3a435ae4d15bf4002fb7eaf80db8836750a1fca2b2d1b0d4927c4cd50977f0e491d46f61fe4fdf8af5568b93d18ec989bb6045c4e71100b56163321c0e599ec3e5cf2049fe5b11b7af412e0483bca84c1e44084b2a0976e747495e3a3d28d6b1824ed150"}], 0x374}}, {{&(0x7f0000003900)=@sco={0x1f, @none}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003980)="60f4e43f42eb1c9d6e2b72e4699a53ea", 0x10}, {&(0x7f00000039c0)="4d143df31b45fd19f8ce62e18183ddf9dfe7f3d005a9f4afad4bb6fdcd24f3ad5baa5878ac3c8db748f24ebc5d49ad7cc416f69227362b4ea44ef52b6640d240b374b7e4cc97b15391d22ed08d6d2a58d6d5437b7c1fb2135f490d24874ea9969a94b4a4c3796fec635b7654e6bdaef14bb85276491007ee4cb8d0832f02a1e04948769770b482a8b67ec8afd1e0cb732566665dfeb1afe5919f35bd0b6b423e3c3e7970f0e460b6a009511699dd06470c555dd228d98c7e8389dc6fa15e3061e4c3d37a539759f7249bad6d7b90da651664fc22796a764b2e5308c17786b596dc11b9c820", 0xe5}, {&(0x7f0000003ac0)="9356e5605a282e096882f83842c1cab2bdc01a100c245b2cfe35d7750dce745ee90ea2b84c607d4c8fde8f9fc38be08e1bd5afa88ae05bc446085867af70517b7adcff347a5fa71263d6f0e6006410ff242780915908a5fa35ce57f2c9dbc8404c0b5c3e18aa54dbf305e41f5116dcb1408b8a7000bed7f73614a76f4ce5ba5e2b5750d364b606dff81ebaefa57961e75c13e957eb", 0x95}, {&(0x7f0000003b80)="aba0b1a739d81d14dfdacebed87cfa16d114037f9d966a45886a47ac8c1677338cd53f5a3a174f1bf57fdae7289bf6f300fe0c762faa7082121e4009ebd2f382c402e9e7", 0x44}, {&(0x7f0000003c00)="2bfffaf11d1f50be31f6a86d392b75e86add24c462a808ca1ebffa36571779992e352760c144ded657937ec48b78f4a410e1685f5d503eb90279c9814717ccb6203d5091a9d995dfbb71c31de876c32fd891061dfc560f464c6cd9ddeab07a3b22bd1f596c51d7fe9fcc923362dd96b79bd9b519270b2ce2f6e3b4f774", 0x7d}, {&(0x7f0000003c80)="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", 0x1000}, {&(0x7f0000004c80)="95cab77b0c59ae41ee48827e45805c2829e5f67e71bbf50b08472d45d09b65a0f01f54b03ebae6bd7cd638600a7ba264b5882d0485ba54b8f39c0e0414078ef05458263f041d22e14e0923c86698a91679958c180672a303ba3051b6bb70b2c9ce8ae748dbe99a832b90d643b4b0befa4ea59525cdb4406f95f9827fb3bce59f7b", 0x81}, {&(0x7f0000004d40)="b3c2a7106a3e14ccedd5af960f615f742eddab06b72857ea6fe5b2d231ee2f4fc115ae9644d31591729556acde8b81afe73bbb641ed6577af278ee9470a271ac12381a5598f1aff1d50440a086e66baa524183d605445d889bc509863f3397a8a686fd3c9e110125af33f91d454617a8b359dad70419e44c520d1bcffa6b8b5b003b84", 0x83}, {&(0x7f0000004e00)="1bddeac7bb5ab944c562bb47893c6dfb1f49fdd32da3440ff1db37c9d9f333354b8bd09adceb863204ee31228b56f0f4547c72a7cf24257a50cf8e8d6edf730dfb4458f2eac5d6bb760f594d62a6a7fafae5767ebd805968297d6760156cbb51edec0d1d9f11c451786f6e3e20ec5a9d22d7bd7844d924654ae7c00b0fd8eab896ae67fd24332c68533245c2c76e93994265912e3a37f8297117ca90a6f7e8120f10353f0fe5b6603ec8a6565afa874c4653cfc50188dcd5b2948e04d60caef4d317c7d2f214a2065d9386aedad5591e001a11e3b765f2fdb4fbba42b813933a", 0xe0}], 0x9, &(0x7f0000004f80)=[{0x20, 0x111, 0x7, "18a6d4812b8beaa2eb9ccd6334903c984152"}, {0xdc, 0x3d, 0xffffffe0, "f24201e6ada57a30840dbfd644e8f4efaa750ffd233ef391050754594c3081f192f8b32c5fa7d7ffd3b9b97380908e378268078f50ee29783f66d2a6e76650e79b385d6c1db4e896be8872be8f311902b72a55fc9dc393fe2d5260ddfa625169cfa114c30375f9bcaab6f5ee788b52a8585068a31677b662a8fe3b44b3cc8541778a6e94602839c8ca81e809de6f9da91ab240da868a5d8ffa048dbf4f2e71fb8048ce746c06307387d3ac726edb648911562ebf44136debedefc17ac6c65271e3d86549703cea249a909fc807"}, {0xc8, 0x10e, 0x2, "65f3c1e29780771d7c4b6f4ba0b618a9800b70b0cb757d78d01c3634591ef3c48022f13284c345cfb9f82362ecfe094da50b651ac15fd202eb7478403d84bfa79fdfb707dc1c8b009ca3034fe7013c223fe313222454b8bcddf1cd7d35e73fc3b5ea9a75132cc456f1f2c9f244fd4c0e7375139376eaf7582b1f641151a053ff736759645e44c2350833d9b5acec91170f70d421840274b220f85d0ff43710713d149da0bbc434016101a6b20f4a10719bd827bcbc9e1cf602a9d89f"}, {0xdc, 0x119, 0x6, "30e80d1859d22c3523ad354d724866e3b57859bc8b58a75f249cdedb85f8e09ed72e97cfd31e9c52de55d27d1c29f973f037693c737f5d31824bfb5adaa0857f687f7e6d3b387172a3320f34b9c26b73562ab10a5045584fabebc047de63c56e7bda0c57cb1009b23cf3de9205a89777c0facb733bdb767f3935f892023b6c47d7f4cbb4c78a58e45940d32bca5af378eaef342de09c903907561b021a17fd2b77c2baf7f5527e4a778dafa7ced7d5783b6a38d008c3b83419bbae83b03331e12ec44a6e204bbff71a838481262f"}, {0xf8, 0x100, 0x3, "df221d17c52e6db584664519ab8a6e9b0f0f44f7ce10214b536b84ca093503fe7488b101abcda423ee03913b0744bd8e3748d4ae49a6b02be7329f376e556fefc821da87ad4f43c8351e48fad14f5b1c58e04695d173716bf07f87e7387634140841fed1b961ddc6f831aff4ab07df856a4b167d42e37ff51d119930ad15bffccf322c13c1781299e552aafad9c4b15e7f1f7294f450d2a0d205eb62858a551d1f28e1cd54806f5ec932dda4d9844cb36a5ed08931ca42adfd9ed8a82bb2e144a0be34940d61db6a96663aa4788153a9e288618cb2e58c7aa447dff02b4f70710ff7afa0da539a1a48f4"}, {0x100c, 0x101, 0x8, "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"}, {0x100, 0x6, 0x1, "bf193ae4ad422749c755bcfc8dadf6341dfc541b746150b299aea5e70b4ee9addfd983b549056bc7039644acece8403c5ce82432412db9fdf274ec04eb0497e52b78586ca7db5f7bc57ba577495617b3da240a4bc46bc928b12c9a9d4edc578b83d7cb96996645a6e28e69835e9b9c6a5d7525cebff1c31f1677650ef86d78936240044e988f2f3396dc22087fbe46d4e25126388a292a563bdb6229c85fc4a8f88237ff63549ced5e0eda5005934c1b25460fdbe7083148552e7e09bdb7ef204a75ec4d91b8b4219da9dd84b9ceae4f614c20d4cb74ec00af15037ee4122c1f754ef56c879d6f4c15bffc5df55bfbcd47d1"}], 0x14a4}}, {{&(0x7f0000006440)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80, &(0x7f0000007780)=[{&(0x7f00000064c0)="e538fdc528dfa6932e2965dc301a7286f94bf6acdcd7a436918f0d40d4f0c9011f523e", 0x23}, {&(0x7f0000006500)="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", 0x1000}, {&(0x7f0000007500)="cd065450381a8e68c06e297e114e371b0a31a437444c647b51fed0a79623021d1e5891877ba0c356ecf35b43c23f9e185cd1a1ecb98c228cc9862aeafca333f9e1dd9296e72f2e0caa6076ff872eaaa334a7c60bceab9b195083d5c5d847d5172d3487ccc8657e52e7110d868b196c3ec9d9e73415df46356a131b166601f9fee8a8edf28356285af298e3671b0f2f58", 0x90}, {&(0x7f00000075c0)="e8d3d73f9ef3c331643a4a38c846dffe9f46f6a3340e04113950cefb83f545a96097f65a52d37f675e45b67da5e318d7e098f820804eab6de7e2b366b6c8c496e00043bdbf79ad6bacdd15e3527b6fc25258448466f80867a66e354ddf7e355212c877dfccdce6c6cf554f99e78674b7e85adea99da16f9ce2cf861e18f24427a5465e72253cfa84d33f9c791cfd48757c08aa41393e823c45f036307f4cdf0d1a7b", 0xa2}, {&(0x7f0000007680)="b86db1c25afa076b71b35f360255bc198b3b84c4553e7419c9461e59b69811a27366a8978bb195b2", 0x28}, {&(0x7f00000076c0)="6e315bd00acedd0fc6bfa5a43bc9b81265c50599297d49c55f62ae81a3af0441395fb1765b89a48fd21781d88f691530e09a258fbbd9b743437329f9cdc54f846863f1a8babd3cd72f19de1834f3815c0f53e24b1a266b650acc2c0fe74ee273e193c533dbf1a9225e92549530fdc40788ad78ef7d940eb4d14ab6344ab337afc13c30cddc8428f2a359f3e799b30036bc0e3e31176019f1cf181df42b6d7411e8388c875ed3a748ae68d6f8540c42", 0xaf}], 0x6, &(0x7f00000077c0)=[{0x10c, 0x11, 0x0, "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"}, {0xa4, 0x10f, 0x1, "3fae6b433a41106a93d11b808eb395260fa88c8de800713192f389add797de322a9f52a8ef02d5c68ad2d261e6e7b043321be8392f4c10c8291124bd62c18646c3ddb5e66a3dcc967025565fdfcae85976fe9efccf16a444e474dc1b410ea2a174ba0337b114f3ce9be782a66b3891d488f250839cc97b6678e3cbea6444ff8b5463b0216ba4a1c4e8417c08d022ec24fa8caee408d9"}, {0x38, 0x115, 0x3, "0efbb27cf194539fa6dc1adc036f763a363684417edfd70a391bbc9309ca50b06e91ac9959bbe9fada47"}, {0x10c, 0x113, 0x7, "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"}, {0xc8, 0x118, 0x1, "614b26d2827e39741fff265c94024c2f2afefb37c59431f8cd9c72a059d885bd25e36db84369b05ddec38afb233576f06356fe4ca64df9212ec5bec1f50e64ab249604f0f7aef9be74f730fb7e803293f3544996d059fdc0bb6da49ebeb167495be097faf60a33e4ffafabd8d925a622d74d1e9a2ee01a00dfc5be34e691db9cf75fe2da8c92bf5ad4b992b88df0431c6996e12d0d69a6d6ca941d21f2438ea1545118cfe6cd2cfb775a4323c5cccb933bb56ec651b249349039cf29"}], 0x3bc}}, {{&(0x7f0000007b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x4, 0x0, 0x2, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x37}, 0x8}}}, 0x80, &(0x7f0000009140)=[{&(0x7f0000007c00)="b4d64087c9f2130ca3d1fc84864a72e491a136d7eaf5e05cd7d4b78a580fc179c27c77bec24aab0a132646c147aeea61ef124735f361c0955aa8ef79eef2dbbd9b95343ff20afa2ea7aebb38fa927ae9afb99c3de3547fe21978312c3af635589d3c014530e269b548a9949df2a741378d124abaa0342d5348050d64db37e699478ed2f19f4696451d99b239976aeebf40bdf94360521d4fdbc213ab50295de2a657bca732f7e94cb4c8ebb1b2c03acb3f", 0xb1}, {&(0x7f0000007cc0)="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", 0x1000}, {&(0x7f0000008cc0)="8bd39e0fcb1c6d9f7a9f3f36b9b0ef07f635373aacc8a587809774df9dccf5e273c73035175ae47261f03f52cf9f6778609c7d016f588925", 0x38}, {&(0x7f0000008d00)="aaf321ac543c89c80dda59a7d151f6cdcb8694092341893032a2af37085e6acb49f6ae6aba14d66727ddc5b0f2663a59abb42d97d07638e6fe95f94500c80a99668f756ffa32f485c646ce24ee0a6ea42c834b20a8dae87eac24e79408f76172f3903968e6d9ee4f708cb1b00703c5bb653401ca3c096932ae3e8be929c636a02d48", 0x82}, {&(0x7f0000008dc0)="24f8f90baacfdcb8bfcab21730d54a13ddc59fbcc30981165e05be4fc47b35448abb70b90bf8a02d75c8bdcab3d638cce29e5925ccc2ebd2850f6273ab5da0e6df36d0e08fa5d57b16e50775fec152cbe0d1d16b8cc59273a7aad7ab021481932f7e7cbe49021a3e3dc9300f71581d848b6172", 0x73}, {&(0x7f0000008e40)="6ce306f2d32ac71aea51d50a07a329699bfecca9eb4b7b170707e5c9976893674bbf7491f4514844539f0d1fea3615ea0a652335e2e114199e664c4695a737222224795f61d618edaacc2361d12ad2766cfb730e7769dafac7068e798cb13fdb0b6806573f5f2c7c1a5950f383ee206159861a1705c2a84d513e788d38ad76a423f417ad03c07451fc7a9577b4f989d87d1e74e93ea0cc", 0x97}, {&(0x7f0000008f00)}, {&(0x7f0000008f40)="77912b3ed17cff375de1a992785d6b8efcdff6e2b4be29d269e0e64af12777f788ad5ecd31e829b776ac9966f5b36328dc099c120156a015c4c8bd07914360677419846c244b94be79eee3d8d94fe3439eaa4b5b7fc5258cedf33ac374ec8b56e4c892bd78a2d9d4dbf47fbca8f864b111bd58065ad0f82ed03e33786204fca0c8c281a8ba2912d8830fbe4f93db84d862840107c55eb4c7ad02384c49d4445997fe", 0xa2}, {&(0x7f0000009000)="fd981580ad09fc112e7d7bac021c958315b8b1317680660b68a06340835c9c6489f5b96a8b864e048f5787660be6ac5d5ed423c5f3359f5ce28126259e576ab7f0e561fc7013076514e0b5157327968a2f7158b8ee0c2173b27c7649f2cfd945290d50cd163c9805e055a3e945b51a4840202cbaa902516c61dc18b2e374ffd916301c62a349cd24df77e8", 0x8b}, {&(0x7f00000090c0)="66d1f7a38feb7876d6705fe5126767f2c6d938f7cd5d6af8302b8a3c6c1244f63c2ceffeabef4f38f7b59eeea007a72c62b98484755069297e4e2f5d4562dc68c033415fa487b22c4b9f46518a7ed3a92a8b69326cda2dde1a5898d5dd2f", 0x5e}], 0xa, &(0x7f00000091c0)=[{0x34, 0x101, 0xcb7c, "1675ae703560c9c183cc7bc85103a39919f9af552da786d8cb8e8773a0bf64436eff9b75e8e379"}, {0xc4, 0x115, 0x2, "3b10a9bd8decd3c775160f7a54aca987ed38954b10e9914871a599d845d484a748bf5fca4c54a0772ac7de42277e6c06e2c4511e20a07f805836c45ba25fe4ca38143dfa19f11bf3c5aff48746b118255e285d527d7efb63043c74f16ce713de9c40e5113ac376979afb3ce400082db4fd3e82c8b92b265c8d98e1b055212ceb7ffe89e120e356ee5537b31aa6c627e6f2c1a999a85cf8d650211921fe036f2d931be6ab812c7ff7349734705db8004af7b4dabc48535e"}, {0xa8, 0x10a, 0x4, "b083963bd4fd23530385f8b9061f35cb3657919b8829099b05947386ec25b27dbd49c9cf94a4b921acc5c3d637b638050e52d9847ae7f951f4d22569b7a589431dd51c04d4b50128a55591a9f1d564b6f78134bb250254747e1221a8d228568a0ace1960c99ac2bef20ba441e538c42ba45cc454420e0b03b016e2d17e06d311c970ae7df5c444748ed6203e24850a69907ff4ebff521763d8b7"}, {0xe4, 0x29, 0x40, "b351105ee8a3e85d5cd16b192b3a481344aed69341c556ab16fab358cb09d958e0058fea4d123139dfcff3fe63f751ffb9919f05d7f91daeab2150277b914cece44ec7f78981e315d69586e1bfe378fadc612dc860fa9a24138eedf106ab47ff4dfaaeb2d3d9c7b4b0f3c6123d1abf494e8c7c82d327164b811234f68ad2fb2cb1bbc85033bad876a38626e7d53302017ee600c71d5cac15e6a59d0b1279b502be3eb37e028a16a70ab15a92848d39357ec3ac71d05afbf479fecff03189e8cd882d3f0c999449918c99f909698f49ac140f1fc446bab1"}, {0x50, 0x84, 0x6, "8d953e49b0f83e21a1686f919cd01b304ebb63839c0cdbc11a124e0ce1bfc6c72e73530c0646ae55662ed1cfd112364959eae9a3bc278fa61c3135667fdac03d0c8c18"}, {0x78, 0x100, 0x5, "8859b117caeb8dadf6fc71f40ced18541344c56986274c8911430dd37fa2a4fa8caff021c2b8637094c2b2167a971c835a0f94d89d11c968274e225111b6aa32d1a38de6db5e08f406b234af7da8332071ad9f863f9628994efc3e43bbce9fe7cbd17cd2d4ea4f3729060abe"}, {0x104, 0x1, 0x2bdd, "0c9a7f595465d86078795bee5716336242ba35f0cd588a5d888248a42ad77931c0af55618cb9b3f2688ec2b39385b9fb0e49e3c2d9fe3302cec0d4e39b7e71e92fd2c123843fbac2d53760bba8015582813f7785736651d144d5a44d0d75727092b89c470932e3133b464094fbde2e9c385f344731986cd5f53b648f2b89f5ecba4b78f589a88de6c3ee226eea39c6056e584bfa4e6e30cdce3fedea2ab1330165027300d817a72ba89e20e0c372f140dc9292672493d13f010180aa5c4bcef0931d30a5d264969ebe6b6cded61f143d49d6aadcbf848ab1a91dd02970392de68128ade19f841f2a3f3e8b17904648f91d8e6a375feb"}, {0xac, 0x10c, 0xfffff801, "2cb5e1fc8f5a62df7b6abefb7085f98b86049b65255a262c2ec81ecae35609cc720b8ca1d8e904041ccc4023fb43f4a6e03488e564ad30dff66d6bfb5d823431b9f5dbffb2e8ce87f2404793578fcdded39d3942780088b56246bfa95f34dcd1fb12ad9bd094f14675a70969ec6e62a9cdd1f2ff6c407b53d929446fbb3632689ed67a4480e51500ab4adcb3b95b044a3dc8532cd173592d6c1ee377e8a6d6c7"}], 0x4fc}}], 0x8, 0x800) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r6 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r9, 0x0, 0x6}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r9, 0x5}, 0xc) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:50 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) 03:45:50 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000180), 0x1) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000007010220000000000000000a0000063c00078008000240000000d6080002400000004008000240e6ffff01080001400000000908000240000000b5080001400000008108000140000000000c0006400000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xc, 0x40010, r2, 0x0) 03:45:50 executing program 0: 03:45:51 executing program 4: 03:45:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000000100)) 03:45:51 executing program 2: r0 = socket(0x9, 0x1, 0x0) r1 = getpgrp(0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) pidfd_open(r1, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='setgroups\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)=""/69, &(0x7f0000000140)=0x45) getsockname$packet(r0, 0x0, &(0x7f0000000100)=0x46) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="e52de29954"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:51 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) 03:45:51 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) 03:45:51 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:45:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 03:45:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x7, 0xafb21304e47e82cd}, 0x14}}, 0x0) 03:45:52 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='|'], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:52 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) 03:45:52 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), 0x4) 03:45:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:52 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) ioctl$TIOCCBRK(r1, 0x5428) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) statx(r2, &(0x7f00000001c0)='./bus/../file0\x00', 0x4000, 0x800, &(0x7f0000000200)) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x7c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x7, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x0, 0x3, 0x85}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x0, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER, @TIPC_NLA_PUBL_LOWER={0x0, 0x2, 0xb3}]}, @TIPC_NLA_MEDIA={0x0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:45:52 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000080)={0x0, 0x10}}, 0x0) 03:45:52 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="e9faf638814c64800001984d5b225ddecef10ac0780bac8d966dd8f09d4f40ca6c128830debb91e783026537ee04bac8b019499646308a34efc9435bc7f8bd1665a23a9f3f7099000693e927f43314f8749413d5adf2dda8c50c50b035753cf4d63d17d330c77c88c284cfa4f7737f4acc35abfb6bf60462d2324c2a1864bc96972389261dbd0fd32697ef18effc723205f3c87c725d3c1586798b9b11d735df03f9ebbbb225e1be108b11a5f781e9976de8c07f360ed4d018430cc925a746532f3e26"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4008ae89, &(0x7f0000001a40)={"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"}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000080)=r6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000080)=r7) r8 = fcntl$dupfd(r6, 0x406, r7) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000140)={0x100, 0xfffd, 0x64, 0x101, 0x11, "99c85ed2e0097526"}) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f00000000c0)={0x5, [0x2, 0x80, 0x5, 0xfff, 0xfffffffffffffffd]}) 03:45:52 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:45:52 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @multicast2}, @mcast2, @empty, 0x0, 0x9f0a}) 03:45:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) getsockname$llc(r1, 0x0, 0x0) 03:45:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) [ 312.337644][T12381] kvm [12378]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xa25c3c0000000000 03:45:53 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xcd1, 0xc0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x0, 0x6}, 0xc) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5, 0x9, 0x7, 0x1, 0x6, 0xfffffffd}, &(0x7f00000000c0)=0x14) clone(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 03:45:53 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 03:45:53 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:45:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}}) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000001cc0)="080db5055e0bcfe847a071") r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000080)={0x0, 0x10}}, 0x0) 03:45:53 executing program 2: r0 = socket(0x10, 0x6, 0x1) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r1, &(0x7f0000000080), 0x10) 03:45:53 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:45:53 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x6, 0x3, 0x0, &(0x7f0000000000/0x3000)=nil, 0x7}) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2812, r2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000080)=r3) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x245a23, 0x0) sendfile(r3, r4, &(0x7f0000000080)=0x1ff, 0x5) r5 = socket(0x28, 0xa, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 03:45:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x2}]}}}], 0x18}}], 0x1, 0x0) [ 313.351312][ T32] kauditd_printk_skb: 37 callbacks suppressed [ 313.351373][ T32] audit: type=1804 audit(1586576754.018:214): pid=12428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/15/bus" dev="sda1" ino=16176 res=1 03:45:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdr_2292={{0x18}}], 0x18}, 0x0) 03:45:54 executing program 2: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x7ab16fb0, 0x4) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="f1"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 313.557774][ T32] audit: type=1804 audit(1586576754.068:215): pid=12429 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/15/bus" dev="sda1" ino=16176 res=1 [ 313.582930][ T32] audit: type=1804 audit(1586576754.128:216): pid=12432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/116/bus" dev="sda1" ino=16197 res=1 [ 313.608104][ T32] audit: type=1804 audit(1586576754.198:217): pid=12435 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/116/bus" dev="sda1" ino=16197 res=1 [ 313.633310][ T32] audit: type=1804 audit(1586576754.218:218): pid=12432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/116/bus" dev="sda1" ino=16197 res=1 03:45:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) [ 313.657699][ T32] audit: type=1804 audit(1586576754.218:219): pid=12435 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/116/bus" dev="sda1" ino=16197 res=1 03:45:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 03:45:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x74}}, 0x0) 03:45:54 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r8, 0x0, 0x6}, 0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000440)={r8, 0xfffffff7}, &(0x7f0000000480)=0x8) ioctl$KVM_SET_LAPIC(r5, 0x4008ae89, &(0x7f0000001a40)={"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"}) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000040)={"5e494651a598ab603669bcd946f6615ccbe41d44adcaa3f221e056f3a6aea2897ea62e68cefda0e4942dea42f59971e3d04014aae65f4ababb5a33fe48c728233f344eb091f68e403338cd51da3efc382719b1b8bbaf8fd65e21811491e28109d8e419a44da88a08f596ba263f17acb2f631fce3a9c4c4ff47130d46fec4457d339a3fbbe85ad096674549fdea4aa4cb289e7b02905c4e838f0dc33f5239970679b29b7a6ea8e54932fa2d6f767e63a5e20814c6348ff890df814c7595bc684261dd9f9ac9a543011355322a35b8f78a05a4d0abb0086928730189cba3fa87eaddada22f66e5b55591f6caa128f300abf6a4eddfc79f6a03bf1e9c926b79523eba6f88cdcce1ea31a1c68b627cfd3f0036d2f19e31bc79863a90f47e1c7eaa7a88dd159ff6751d240e10803c2bb3ae01df9ed80841cd6f7a15b2c2be15215cbe8acd5ac57ebd609113b48d5ae5efee2d24a3b42e2c9b9db8e4a141d9c6e5942ec7f6e577d39e737a55e4a3beeabc5ad9dc914bf3b593166b57b60c98754a4f7cb3d335704e8150412571d5d24cc63fe30184c6c7cbbbfe70f3aae58a0e8220552143f311e9c71cccfe8abee18b02a52cf62e67ed62728487b328d1d056cb38ae37dec5c49633b68bbe640db66b6d5eda9b57b2b9a634889ad2a49ebfaccd6c30746dc18df3b8020564cba7a56d9b57c8da2cf05bb2b0a76fbeeb604c7a8ab41fe0d27f7c1c52b6c4f4e546c2e342207ec85bc8f710088286eed0d7951f6ff5028d6f126296f75fcfc24af22643cd864978872cf878682e8680210265e0cd71bb94e843a43d6a196601fee53c7e18e09e11c72b879a1ce773e183ec261dca414d766bf55ac7d7fbd321a07a87cf27416013e53a93417690955babd84a6c8d45d8800af919f05678aa9842f90232e72e1fbdc87e1bd0993b0c9c586f1d9974e97f17503457be59fb32a9c0fcbfc80bbb486ed3fcafc0799e7bee7f9e4fc40d0c7e110fd2b595ec7b791d6e4e11e7037d2fdf34c26e885b32fd9fccab0b7ab0ea9274da129b1477cbefdf1ba28909509894ceef7052ea413c9112280afadf05a1d17b76a75f0398fada6aec5bd6cbde309727f599b30c15e39546405adb7f4b84815b68f6919c530a96dc20fb0d4e16f9fba75d1ac26b0020d2d04c169621cab864f61bb793de2dbec07d4bc32b58e078675f81c70a44a76dd8859e9051b5d0579b0d9995f868854d893a6de568235ccb781f67092616405d3563151f97067aa1ca3d288531085f9b9ea5dbe803fe1b8e257759133ae660d08e5d5b010e238fa6b9ed178dfcd9302a4ec12ab2550c88a20e23cc7f61f25b12e0d3ea99c2a45d3a833e544acf4d34f3f360913e890c1ee6e80f5c038849ab57d3302a06c45c3780310214a411efd99d586e749ef7d1ba94ec173aa2de5613e8be9ac4a5b10b2aa5ba"}) 03:45:54 executing program 2: socket(0x10, 0x803, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141842, 0x90) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c10600000000000000b2801c"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:54 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x7, &(0x7f0000000080)={0x0}}, 0x0) 03:45:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:45:55 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") close(r0) [ 314.296767][T12458] kvm [12455]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xa25c3c0000000000 03:45:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x74}}, 0x0) [ 314.511663][T12458] kvm [12455]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xa25c3c0000000000 [ 314.517230][ T32] audit: type=1804 audit(1586576754.368:220): pid=12435 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/116/bus" dev="sda1" ino=16197 res=1 [ 314.549594][ T32] audit: type=1804 audit(1586576754.628:221): pid=12448 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/16/bus" dev="sda1" ino=16219 res=1 [ 314.574779][ T32] audit: type=1804 audit(1586576754.698:222): pid=12452 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/16/bus" dev="sda1" ino=16219 res=1 [ 314.599811][ T32] audit: type=1804 audit(1586576754.808:223): pid=12458 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/117/bus" dev="sda1" ino=16222 res=1 03:45:55 executing program 2: r0 = socket(0x1a, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) 03:45:55 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000000, 0x810, r0, 0xe9684000) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f00000000c0)={0x9f0000, 0x1, 0x4, r1, 0x0, &(0x7f0000000080)={0x9c0906, 0xab54, [], @ptr=0x80000000}}) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:45:55 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:45:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") unshare(0x20600) getsockname$llc(0xffffffffffffffff, 0x0, 0x0) 03:45:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x74}}, 0x0) 03:45:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:45:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1410c2, 0x12) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800acd00, 0x0, 0x0, &(0x7f0000000040), 0x0) 03:45:56 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x84400, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:45:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x240007bc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 03:45:56 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) [ 315.419120][T12516] binder: 12514:12516 ioctl c0306201 20000240 returned -14 [ 315.453025][T12516] binder: BINDER_SET_CONTEXT_MGR already set [ 315.459488][T12516] binder: 12514:12516 ioctl 40046207 0 returned -16 03:45:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x5000, 0x10000}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:45:56 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x100}) 03:45:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2}}]}, {0x4}}}]}]}, 0x44}}, 0x0) 03:45:56 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:45:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:56 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1000000, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = socket(0x10, 0x80002, 0xc) getsockopt$sock_int(r2, 0x1, 0x28, &(0x7f00000015c0), &(0x7f0000001640)=0x4) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000004200)=ANY=[@ANYBLOB="1c000000080601040000000000000000000000009c541b54f6da32be6c136816cf42754dda3f8e8e2539c43c3853aa0be1470ce7635355b13437d42789cd534670f42546c0b3150f35956ac2b82dce01d83a23537f8bc9f1cb4c140583d2fd6980"], 0x1c}}, 0x0) setsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f0000000040)=0x5, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x7, &(0x7f0000000540)=[{&(0x7f0000000100)="ecaabeb92e52c6938b9190969828771c93266fd4906e192b84af8b480ef4347b9205f07af01e0cc3c518b86165", 0x2d, 0xf96}, {&(0x7f0000000140)="a9e43e72c85242a122e6629a16150cc872e9e9c23345f40b9f9eb19cbf6227c1eabdad99aa841f443ea402fc94ec5c168e30f51c604639547b2f61e89a75204a86766d519ec3c68ffab8e37fe330e74d65936e0a889834a863d9491e68e8c77a2cabe90af08332061c56ecb419561386b4e57fa3c4d48f15e1d474a3b0d1bd6ad5549b5035d7c633856fa1a72c3bd4525ca417c3ea4a026e4a40d6c2e57fd71e208c2f0e5f7b70efcf5eda5a0b9a7f3ac5e193ffa54a645dd966d3cb8bf45d7087f79d78f7fe1fe7959fa83158b107ea8a812dce", 0xd4, 0x3}, {&(0x7f0000000240)="b2868366eff37d762e2b634db2a96ccdd9d51539aa", 0x15, 0x6}, {&(0x7f0000000280)="56518a1b679975f539e657e94f3e29eb20b3d122818a158aa36eeccd455e09415e6b1980031453d4b83051d62a53140066b229bb5b2a9c1138a966e1a1f1d2a0cfb32dc2fa8ac33befd5d303bcb7d76ce7073ebeae1733ab1620730d22de", 0x5e, 0x4}, {&(0x7f0000000300)="c490a9b74f6e92d1dc47468438e11731173940e42d3b6567b1f9ff76e2665319ad31ac1e4c33b736fe9119ca7984676cbeb04d6466831901434ef0532394", 0x3e, 0xfaed}, {&(0x7f0000000340)="38fdb51e5a3014a48310b6b9faeac4d1f5c9897228b423f92749e14735613db128e0d5f2cba4622222ac5e38684861bea96ac9057b21b1ea6d922a7c6a503983c105daa0621b21f2242603958438e828dd8286232e5d43c88c3f04899256cd8b94615c47d0aee659bf5697ccb5ac8f5251f377102b349a71d3e74d9df7791312ee746f4b15d73a3167196743c1e16dc27b8c1dfad9998fec99b63cbc58f229afe5071b62b81e3ceba9d0feb4ed8c6421b9d6f6fad520c5f9330754fa5ee6d675219a0df3f9e72f54d1591ca03931c517d052e623e97dd6933efb2aa2dad40fecd03d3d1be562e70609483b4f4250177c37e695f9da", 0xf5, 0x4}, {&(0x7f0000000440)="d4d5b7c409ddea0b0713f89817696f9a257fc28c29e0608e687899fd6bfd3d61a205da4803fbe5df5edcce7a0cadfdc7c7d92511413dc1a9676e5434df8d82b2d4b87e3985dcf038a6224dedbec0eece932e3a84852f4f1a762501a0ca42478fc492986499cc51e5fe8868de48c604e51d91fb17f0f13bc31a9c39dab72fdd8f6a2da48e71398816b95c8c4c79bd71cfcbc6ed0b79e8034261c85ebd97570de4b9f00cd0102e358ac7b26ea525438b63418b5f050e3c58a67e20b8b1e1e2b6569e3cca8d0dd989c71d56aadb83d67641c8a345dfb680062673fcfc", 0xdb, 0x6}], 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) syz_mount_image$vfat(&(0x7f0000001700)='vfat\x00', &(0x7f0000001740)='./bus\x00', 0x7c, 0xa, &(0x7f0000004080)=[{&(0x7f0000001780)="7407a5aa4c9ce3e6dc729c69eda18a2390fe94b861fa1132d170dd0d", 0x1c, 0x40}, {&(0x7f00000017c0)="5564cf20b531c035b42cc58c6ce21f59637952c74ce76c65743f6ea160f63ac535cb108f8b29887a7ef179a909", 0x2d, 0x1}, {&(0x7f0000001e40)="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", 0x1000, 0x9}, {&(0x7f0000001800)="bb093e0e085165d77548d3c12555b0d6039c6f6d124c4928", 0x18, 0x3}, {&(0x7f0000001840)="ebf37fc28d4b0dfc96fb8ae036adc677dccbcf6e11942d9e30d7d573a135dc5566fde544cb6e86e469cd1aa1949c823a4fa5efa8aad1b03f8605d37cc5060d0fa3f9a459255fafeb60a1e30dd2f7485efa16923d6b4cb3c8448fef7be5557b2669cd61c139585c346e8e545c7b17b837418bd7891ebada9fd4a8a5a1a03dff779d31b7242190be6a99a0df786581cad50c61a0fac7b7c0b59d8ff722e2c58dcbaec1bd17be", 0xa5}, {&(0x7f0000002e40)="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", 0x1000, 0x4}, {&(0x7f0000001900)="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", 0xfc, 0x8}, {&(0x7f0000003e40)="2d4bc35bf18d9425d876051bb5595f95d97050140806c160a96591159bfccf06822f14655ed3ea6d274f13714b067e2258841ac98f092a0779d560d1a0380bc986feaa8ba94f90cd600e711cd5d526e4269acae5c64b676f7ca047095668df5e2cbd6b4ac9b14c315b7e790c", 0x6c, 0x4}, {&(0x7f0000003ec0)="8eb1b241d00b8b5af22cc16699fde42674c08e3162095e77af1eb59f773234a3bdef84073fd38e2fb2cb8bcc4d68e66118465368042b56ebad5f08f30b34fd4dd4179a7c42dde673a03a778abfa7f9ec5e26fa3c76a4069e59ddc319e7b2f8571f684a0b0e7a2d1760980bd6d5fb727a88451965b450966532ece1893316b58588cf45d3d377f1b7d08fd3e660b197a4241f43b01eb0a6e8492330d00b6a9ba2a27adf1e003e8c92877573503d75d825c594ba2946b4055eef38452fae9dc707b8692bc1adbae8ebb74f08cd3a79a9436838177889c66d2adc2ade891de93ff9bba920ad8d149e526e51f62cc375eeb683c899", 0xf3, 0xd635}, {&(0x7f0000003fc0)="f56a8c505d728cf1936e5a687e380366f9fde716764fa152057ca22ed043a9aea1b256f010fb4c050cf98e2bff4d28225bbb0298963965deed488e7f2e668b0f3d1b277d373e2ead828067c7c804cfc557c90be081664b7c2bb3d53611212ee500104f075728d5cdd5bb4c3b560b713a4797781d719960d238cfa61a08d37085628fc63c9e33916d82742e1dd777e4f8", 0x90, 0x9}], 0x2808000, &(0x7f0000004100)={[{@utf8='utf8=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x64, 0x37, 0x30, 0x37, 0x32, 0x66, 0x31], 0x2d, [0x30, 0x37, 0x34, 0x34], 0x2d, [0x66, 0x34, 0x63, 0x64], 0x2d, [0x39, 0x62, 0x33, 0x61], 0x2d, [0x37, 0x30, 0x39, 0x39, 0x61, 0x30, 0x64, 0x38]}}}, {@hash='hash'}, {@fowner_eq={'fowner'}}, {@smackfshat={'smackfshat', 0x3d, '\x11!systemposix_acl_access@[]:}'}}, {@euid_lt={'euid<', r5}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84010100c0c9c8dc1964325fa96fa4ffff0a0100002bec0ba4c81036c93a40c8a4150001c03b00040000000000003c5ca2410101c0ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f00000005c0)={[0x100, 0x313, 0x7, 0x200, 0x5, 0x3, 0x0, 0x1, 0x81, 0x616, 0x7, 0x3, 0xffff, 0x3ff, 0xe690, 0x8, 0x77c, 0x40, 0x5, 0x8, 0x7, 0x200, 0xe39c, 0x0, 0x80000000, 0x7fffffff, 0x1ff, 0x400, 0x60c, 0xdb21, 0xd7, 0x8000, 0x40, 0x7, 0x80000001, 0x5, 0x9, 0x6, 0x6, 0x9, 0x7, 0x6, 0x3dda, 0x0, 0x7fffffff, 0x0, 0x4, 0x1, 0x1, 0x1, 0x3, 0x0, 0xb8, 0x100, 0x3, 0x1ba, 0x2, 0x3, 0x6, 0x7ff, 0x0, 0x3, 0x0, 0x9, 0x3, 0x6, 0x2, 0x4f8, 0xffffffff, 0xf789, 0x9a4, 0x1, 0x5, 0x1, 0x3, 0x81, 0xec8, 0x4, 0xc1, 0x80, 0x0, 0x8048, 0x7, 0x401, 0x0, 0x7, 0x2, 0x0, 0x0, 0x9, 0xfffffdd0, 0xff, 0x1, 0x0, 0x81, 0x5, 0x1f, 0x7, 0x2, 0x2b77, 0xfff, 0x4, 0xb5, 0xfffffffe, 0x6, 0x81, 0x8000, 0x40, 0xffffffff, 0x401, 0x40, 0x2, 0x645d, 0x1, 0x6, 0xfffffc01, 0x5, 0x7, 0xffff, 0xaba02f3, 0x3, 0x80000000, 0x9, 0x5, 0x6, 0x8, 0xfff, 0x4, 0x80, 0x8001, 0x80000000, 0x44cc, 0xff, 0x1, 0x8, 0x1, 0x8, 0x3, 0x7fff, 0xffff5874, 0x1, 0x3, 0x3, 0xfff, 0x1f, 0x5, 0x3, 0x3, 0x5, 0x4000a20, 0x101, 0x6, 0x81, 0x3, 0x9, 0x9, 0xda, 0x9, 0x8, 0xfffffffb, 0x9, 0x40, 0x4, 0xffffffe1, 0x8000, 0x1, 0xfffffff8, 0x7, 0x8, 0x100, 0x101, 0xfffffff9, 0x1, 0x6, 0x0, 0xe15, 0x3, 0x0, 0x3, 0xa89, 0x2, 0x7, 0xfff, 0x6, 0x6, 0x5, 0x1, 0x6, 0x81, 0xffffff97, 0x1, 0x9, 0x3f, 0x8, 0x200, 0x3, 0x400000, 0x7fff, 0x2, 0x2, 0x8, 0x6, 0x9, 0x4, 0x4, 0x1, 0xfffffffc, 0x2, 0xfa12, 0x8, 0xffff, 0x1, 0x7, 0x10000, 0x7fff, 0x0, 0x7fff, 0x8000, 0x5, 0x0, 0x7ff, 0x5, 0x46, 0x0, 0x0, 0x400, 0x7fff, 0x5, 0x0, 0x645c, 0x3ff, 0x100, 0x0, 0x4, 0x7fffffff, 0x1f, 0x4, 0x9d1, 0xf96, 0x76e0c9e7, 0x7bc, 0x5, 0x9, 0xd21c, 0x4, 0x9, 0x7f, 0x0, 0x1, 0xfff, 0x3, 0x5, 0x7ff, 0x4, 0x6d1, 0x300, 0x7, 0x2, 0x7, 0x9, 0x3f, 0x6, 0x4, 0x3f, 0xffff8001, 0x4, 0x0, 0x4, 0x7, 0x6, 0x9239, 0x3, 0x6, 0xd57, 0xc06, 0x8000000, 0x9, 0x9, 0x3, 0x1, 0x4, 0x800, 0x0, 0x0, 0x80000000, 0xffffffff, 0x40, 0x5, 0x7fffffff, 0x0, 0xffff, 0x6, 0x7, 0x0, 0x100, 0x2, 0x2, 0x0, 0xb7, 0x2, 0x9, 0x8, 0x127a, 0x5, 0x33, 0x7fff, 0x80000001, 0x9, 0x0, 0xa2, 0x1, 0x6, 0x4, 0x100, 0x400, 0x3, 0x3, 0x9, 0x8000000, 0xff, 0x401, 0x1, 0x6, 0x689, 0x4, 0x8, 0xffffffff, 0x80000000, 0x8, 0x3f, 0x3, 0x3ff, 0x2, 0xfff, 0xfd, 0x7, 0x0, 0x2, 0x5, 0x2, 0x9, 0x5, 0x7f, 0x6, 0x9, 0x5, 0x3, 0x7, 0x5d, 0x2, 0x7, 0xff, 0x8, 0x28b2, 0x503, 0xffffffff, 0x4, 0xfffffffa, 0x1ff, 0x3, 0x6, 0x49d2, 0x4, 0x7ffffffe, 0x7fff, 0x8, 0xfe, 0x6, 0x1, 0x7, 0x2, 0x1, 0x10001, 0x8, 0x1000, 0xfffffff7, 0x1, 0xaab, 0x8f, 0x163, 0x8, 0x4, 0x5, 0x5, 0x7ff, 0x1002, 0x1f, 0x38cf3beb, 0x0, 0x2, 0x100, 0x4, 0x8, 0x4, 0x6e0, 0x8, 0xf1, 0x3, 0x2624, 0x6, 0xa796, 0x0, 0x5, 0x3, 0x6, 0xff, 0x9, 0xffffffff, 0x8, 0x5, 0x8, 0x1200, 0x8, 0x2, 0x2000, 0x8, 0x4, 0xcab1, 0x10001, 0x5, 0xfff, 0x800, 0x7fffffff, 0x7, 0x1, 0x1ff, 0x7fffffff, 0x7f, 0x3, 0x81, 0x21, 0x0, 0x0, 0x10000, 0x7da3f798, 0x1000, 0xffff, 0x5, 0x76000000, 0x70000000, 0x200, 0x100, 0x6, 0xb2, 0x4, 0x8, 0x5, 0x6, 0x4, 0x8, 0x1, 0x5, 0x5, 0x144, 0x3, 0x2, 0x1f, 0x6, 0x4, 0x5, 0x9, 0x9, 0x8, 0x2, 0xffff, 0x6, 0xfffffff8, 0x10001, 0xeeb, 0x6, 0x3f, 0x7, 0xb1, 0x3, 0x7f, 0x0, 0x7, 0x7556, 0x7fffffff, 0xfffffffd, 0x5, 0x8, 0x8000, 0x81, 0x260, 0x15, 0x11, 0x6, 0x400, 0x87bf, 0xee, 0x18000000, 0x3, 0x9, 0x40, 0x0, 0x7a, 0x0, 0x7, 0xffffffe1, 0x492d, 0x1, 0x3, 0x80, 0x100, 0x81, 0x800, 0x3, 0x81, 0xae, 0x2, 0x5822, 0x7f3, 0x1, 0x81, 0x7fff, 0x0, 0x2, 0x1f, 0xe0000000, 0x9, 0x7, 0x6, 0x1, 0x6, 0x5, 0x2, 0x6, 0x8001, 0x5, 0x0, 0x80000000, 0x6, 0x5, 0x6, 0x5, 0x8, 0x3, 0x1, 0x8998, 0x6, 0x7, 0x1, 0x7, 0x0, 0x6, 0x7f, 0x4, 0x100, 0x3ff, 0x2, 0x80000001, 0x60, 0x2a00, 0x3, 0x0, 0x7, 0x7f, 0xfffffffa, 0x2, 0x400, 0x40, 0x3, 0x101, 0x0, 0x5, 0x8, 0xfff, 0x4, 0x9, 0x22, 0xfffffff9, 0x8001, 0x6, 0x1, 0x9, 0xcb, 0xffffffd9, 0x100, 0x2, 0x7, 0xfffffffa, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0xffffffe1, 0xffffffff, 0x6, 0x8000000, 0x8cd, 0xe53, 0x2, 0x0, 0xdff, 0x8, 0x5, 0x794, 0x101, 0x1, 0x0, 0x3, 0x1b10, 0x5f, 0x3b, 0xe3, 0x10001, 0x615, 0x3, 0x0, 0xffff5ac2, 0x2, 0x5, 0x80000001, 0x34245408, 0x1f, 0x10000, 0x1, 0x6, 0x7, 0x3, 0x20, 0xfff, 0x9393, 0x7, 0x7b02, 0xa36, 0xffffffff, 0x12, 0x0, 0x80, 0x0, 0x8001, 0x1a, 0x2141, 0x8, 0x5, 0xfffffffd, 0x8, 0x3f, 0x100, 0x1731, 0x3ff, 0x2, 0x5, 0xcd, 0x3d4000, 0xfffffffe, 0x6, 0x3, 0x8, 0x5, 0x4, 0x1, 0x101, 0x401, 0x100, 0x8, 0x774, 0x0, 0xa03, 0x1, 0x6, 0x1, 0x401, 0x2, 0x4, 0x4, 0x1, 0xfffff861, 0x6, 0x20, 0x8, 0x5, 0x54, 0x8, 0x1, 0x72b, 0x5, 0x3, 0x0, 0x7ff, 0x7, 0x9, 0x10000, 0x653, 0xfffffff8, 0x20, 0x3, 0x8, 0x5, 0x80000001, 0x3, 0x1d5, 0xd7d, 0x4, 0xfffffe01, 0x1, 0x7, 0x101, 0x20, 0x8, 0x80000000, 0xffff, 0x3, 0x9, 0x6, 0x6, 0x800, 0x40, 0x1, 0x7, 0x0, 0x8, 0x42cc, 0x0, 0x8, 0x8, 0x0, 0xfffffffd, 0x8000, 0xfff, 0x7, 0xbca1, 0xffd4, 0x8, 0x5, 0x6, 0x9, 0x8000, 0xfffffff8, 0x1ff, 0xff, 0x101, 0x10000, 0xffffffff, 0xeeb, 0x3, 0x55a8, 0x8, 0x2, 0x80000000, 0x7, 0xffffffff, 0x3f, 0x5, 0x94, 0xfffffff7, 0x36, 0x3f, 0x7041, 0x2, 0x20, 0xf99, 0x200, 0x3, 0x12f, 0x81, 0x7, 0x3, 0x2, 0x8, 0x7, 0xfffff000, 0x4, 0x80000001, 0x8001, 0xfffffff7, 0xd89b, 0xff, 0x7ff, 0x6, 0x0, 0x6, 0x10001, 0x80000001, 0x1, 0x0, 0x10001, 0x1, 0x2, 0x7, 0x4, 0x10001, 0x9, 0xe5f, 0x87, 0x10000, 0x74, 0xfffffe00, 0x8, 0x7, 0x7, 0x7, 0x64, 0xd7, 0x2, 0x2, 0x7ff, 0x7f, 0x1000, 0x4, 0x7f, 0x1f80000, 0x4, 0x14c, 0x6, 0x1, 0x80, 0x4, 0x3, 0x5, 0x6b, 0x5, 0x4, 0x6, 0x5, 0xffffffff, 0x3, 0x20, 0x86e, 0x4, 0x9, 0x2, 0x84, 0x8, 0x10001, 0x6, 0x1, 0x8001, 0x4, 0x0, 0x20, 0x9, 0x101, 0x7f, 0x3ff, 0x1, 0x2, 0x1, 0x5, 0x0, 0x4, 0x80, 0x80000000, 0x7, 0x7fff, 0x7, 0x101, 0x5, 0x80000001, 0x2a, 0x6, 0xffff, 0x6, 0x9, 0x7fffffff, 0x2, 0xffffffff, 0xfffffff8, 0x9, 0x680, 0x2, 0x7f, 0x0, 0x2, 0x6, 0x7, 0xd8e, 0xa1a1, 0x7b04, 0x8001, 0x10001, 0x100, 0x3ff, 0x0, 0x2, 0xfffffffd, 0x9a3, 0x3a, 0x2, 0x0, 0x9, 0x8, 0x3d7, 0xffffffdd, 0x5, 0x1, 0x2c73, 0xfffff49a, 0x4ce7fd24, 0x7, 0x22f2, 0x386b8980, 0x67, 0x4, 0x5, 0x1f, 0x800, 0x78e, 0x200, 0x5, 0xfffffe01, 0x8100, 0x7, 0x777, 0x4, 0xa8, 0x4, 0x1, 0x8db6, 0x40, 0x6, 0x10001, 0x3ff, 0x4fd2a376, 0x8000, 0x8, 0x8, 0x6, 0x1000, 0xc0, 0x80000000, 0x7ff, 0x8, 0x2, 0x1, 0x7, 0x4, 0x6, 0x9, 0x5, 0x3f, 0xffffffff, 0x5, 0xff, 0x3, 0x2, 0x7, 0x7, 0x6, 0x9, 0x4800, 0x780, 0x1, 0x4, 0x4, 0x6, 0x0, 0x8, 0xbfc, 0x401, 0x3, 0xfffffffe, 0x100, 0x20, 0x5, 0x9, 0x4, 0x0, 0x7fffffff, 0x4, 0x5, 0x8, 0x80, 0x8, 0xffe000, 0x6, 0x100, 0x3, 0x0, 0x1, 0x5, 0x7fffffff, 0x1, 0xf7, 0x2, 0x7fff, 0x3, 0xffffff4d, 0x400, 0xfff, 0x10000, 0x8, 0xf4ff, 0x10b6, 0x3ff, 0x9, 0x4, 0x8000, 0x2, 0x2, 0x1, 0x6, 0x2, 0x80, 0x10001, 0x4, 0x5, 0x612a, 0x100, 0x1ff, 0x3ff, 0xa00, 0xc9c, 0xfff, 0x4, 0x2, 0x2, 0x9, 0x400, 0x5, 0x8, 0xffff, 0x80, 0x7, 0x10001, 0x1, 0x0, 0x396e, 0x5, 0x9, 0x4]}) [ 316.651832][T12556] device veth1_virt_wifi entered promiscuous mode [ 316.770762][T12552] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 03:45:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) [ 317.037284][T12552] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 03:45:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x70, 0x0, &(0x7f0000000200)) 03:45:57 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:45:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 03:45:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:58 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) read$FUSE(r0, &(0x7f0000000280), 0xfffffed3) 03:45:58 executing program 0: r0 = openat$vicodec1(0xffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000200)={0x0, @pix_mp}) 03:45:58 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:45:58 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r1, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe20ae893900000000000000000000bb1400060000000000e9000000000000000000c664e0779a27427051ae71e6cc05217af06263a42f1ddc99e09e5d67d2a1f8d11a420eba187e086d7524e881f1f116a6293773d4acb0bbb33951c80b3c0d2de03d12517e3cf8334a70236ea1bb6c746c4a2341c46e77063df8e83069cd14442eaa4226ed8ad5e5a5d77bb2"], 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800e21648fd85f6a71900000000000000005714", @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x10) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r8, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r9, 0x0) 03:45:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) [ 318.002108][T12611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64840 sclass=netlink_route_socket pid=12611 comm=syz-executor.1 [ 318.154775][T12616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64840 sclass=netlink_route_socket pid=12616 comm=syz-executor.1 03:45:58 executing program 0: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05ris\x03\x00\x00\x80\xc7M8\xf0e\x15e\x00\x00', 0xfffffffffffffffe) 03:45:58 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) read$FUSE(r0, &(0x7f0000000280), 0xfffffed3) 03:45:59 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:45:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:45:59 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x24f17000) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="e5523049a20aa064"], 0x1) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8001, 0x0, 0x1}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) [ 318.562218][ T32] kauditd_printk_skb: 35 callbacks suppressed [ 318.562276][ T32] audit: type=1804 audit(1586576759.228:259): pid=12634 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/23/bus" dev="sda1" ino=16284 res=1 [ 318.762856][ T32] audit: type=1804 audit(1586576759.368:260): pid=12641 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/23/bus" dev="sda1" ino=16284 res=1 03:45:59 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) read$FUSE(r0, &(0x7f0000000280), 0xfffffed3) 03:45:59 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x10, r0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000940)) 03:45:59 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:45:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 318.999429][ T32] audit: type=1804 audit(1586576759.658:261): pid=12649 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/122/bus" dev="sda1" ino=16277 res=1 [ 319.283747][ T32] audit: type=1804 audit(1586576759.798:262): pid=12659 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/122/bus" dev="sda1" ino=16277 res=1 [ 319.309614][ T32] audit: type=1804 audit(1586576759.818:263): pid=12656 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/24/bus" dev="sda1" ino=16290 res=1 [ 319.334522][ T32] audit: type=1804 audit(1586576759.858:264): pid=12649 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/122/bus" dev="sda1" ino=16277 res=1 [ 319.359586][ T32] audit: type=1804 audit(1586576759.868:265): pid=12649 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/122/bus" dev="sda1" ino=16277 res=1 [ 319.384245][ T32] audit: type=1804 audit(1586576759.878:266): pid=12659 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/122/bus" dev="sda1" ino=16277 res=1 [ 319.409273][ T32] audit: type=1804 audit(1586576759.948:267): pid=12649 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/122/bus" dev="sda1" ino=16277 res=1 [ 319.433923][ T32] audit: type=1804 audit(1586576759.948:268): pid=12663 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/24/bus" dev="sda1" ino=16290 res=1 03:46:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) 03:46:00 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) read$FUSE(r0, &(0x7f0000000280), 0xfffffed3) 03:46:00 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x149040, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2812, r2, 0x2000000) 03:46:00 executing program 5: mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:46:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) 03:46:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r2, 0x10, &(0x7f0000000140)={&(0x7f0000000080)=""/121, 0x79, r5}}, 0x10) 03:46:00 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) 03:46:00 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2000009, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:00 executing program 5: mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:46:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:01 executing program 0: open(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 03:46:01 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) 03:46:01 executing program 2: r0 = socket(0x29, 0x803, 0xfffff) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000440)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xec, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_ID={0xa7, 0x18, "cd6071f580efcda28b49351a5e8c1e80d42933944180f8fc01ca068e1e977d6c6ce4c2156067b8d9fad6382fb73d0cfef516ff04569eb510d9abba7729858ccb9f49f080f4972a2eca612b62130b3c30aeffd5cb9806c25f41ea85682540cabb9ffbb75908ce465428c7f58db24dfc7fd20c5fcbd57bcf59a1f712f284e7574b24a3eb9d68c348426bbcb5031ddcfee4a4bc5be4f1759a0083b07024b84447ae2e399d"}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x8}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x408}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xdb}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x1e}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000051) r4 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000018001040000000000004fe8ac507a2edaae0f09492ddfab1c4f2801f66d47ae97fd7b38ab48471a7718a70a859c655e97308f9eb4da2dae44772f8d6dd5438f9f0da1b3e35ff10062a021b86bfd0bb7f88ae8fa49496e000000800000000088aa391b2702ac3d3389f832fc79d304ac872ea46cb0ddd08b1de6c7c41d1de557b2f923b2c02eb9d97340dd611ab35a2a7d21e2245cbaf063d63804cd2345db0a4e9eba9197324ef3480fea00049c7e318b13380a23371cc776921d75772990e6dbbb454846628d887b8adae12c27fc7b59edccff48cf985428a32671"], 0x1c}}, 0x0) getpeername$unix(r4, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 03:46:01 executing program 5: mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:46:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:01 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) read$usbfs(0xffffffffffffffff, &(0x7f0000001380)=""/70, 0x46) 03:46:01 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x42200, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000080)=r3) read(r3, &(0x7f0000000140)=""/73, 0x49) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000080)=r4) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000040)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) 03:46:02 executing program 5: r0 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:02 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) read$usbfs(0xffffffffffffffff, &(0x7f0000001380)=""/70, 0x46) 03:46:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="e1041b5b409608965736985a876a4942693ecf5a0d53791eb0b2e7ffa9d78d939e529e70a686ecd2c10ecb73bb223d6a98d96f1dd56b5b32ea6d0c680ff88f5143533ed617f396f6546aae264ab0da318c1db11a2d2e93dcf2d7539743d0cb108d2246370b8c4a72ba4a6c0c64913a3e6f316994336c2ca5e4340d3044f5a6f0e4b56acac1c36ac183291d219e0f8fb70c1f8b8d0fe82f7e76dbcd6ef954ceaa51e95bd1e3c0ad9c23095bd8cc1700de1c8583e4063981"], 0x1) r2 = getpgrp(0x0) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) pidfd_open(r3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000140)={0x4, 0x2, {r2}, {}, 0x9, 0x2}) r4 = open(&(0x7f0000000180)='./bus\x00', 0x149342, 0x40) fdatasync(r0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000080)=r5) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="4a6d409cb3be193eef112c00c0", @ANYRES32, @ANYRESHEX=r5], 0x23) clone(0xa02f2d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}) 03:46:02 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010f00000000000000000800001a04000180"], 0x18}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x300, @time={0x1, 0x6}, 0x80, {0x6, 0x7f}, 0xc1, 0x0, 0x81}) 03:46:02 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000934000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) read$usbfs(0xffffffffffffffff, &(0x7f0000001380)=""/70, 0x46) 03:46:02 executing program 2: pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000000c0)={0x2, 0xe952}) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:02 executing program 5: r0 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f000000060000009805000080030000c8010000c8010000b002000080030000c8040000c8040000c8040000c8040000c804000006000000", @ANYPTR, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000e0000000000000028004453435000000000000000000000000000000000000000000000000000002900000000000000fe80000000000000000000000000001b000000000000000000000000000000010000000000000000ff00000000000000ffffffffff0000ff0000000000000000626f6e64300000000000000000000000626f6e64300000000000000000000000000000000000000000000000000000000000000000000000000000000000000033001f060400000000000000a800d000000000000000000000000000000000000000000000000000280053594e50524f585900000000000000000000000000000000000000000000028045ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800e80000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000b1763be3b9decbca0b2aea4a061dbb1203e7eec6139867c35e920ed96558"], 0x3) 03:46:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="190100f4868a969a5900569ac580bf000000009dfae060ac32ca010a06f5162446a7cedd3a2661b909e5cbadc5ad43916f7c670dc5f729e51492a4dfc84405449125887d4225edf6f380efd2e3543c764919ccf414ce6b1abff5d13b05c19efdb344a3fc926a1ae3da41f5ac0933c3162d24aec97fc841e97d6bfd16869e7fdf3f2569a305f719fa949c9239b07c9f7e08efab5239fd49db3643c9fe553ec32c0c66e4c3c5dec5c746923b2460e194784c10706a257124d0118284b627a1791b002f99f802cd82cef553338fbdfba0a3b5675afb36a6a7014ffe960e3734a320e60d095f9de3534572a0eadcaf5e3d8e5adcf5b52e16107040c06b136e53e0bf802aa52344a7565db5e943c6482bf0b042114acf5dcee3f661ba2cff69c91737dd970a"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:03 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x62a000, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x0, {0x2, 0x4e20, @loopback}}, 0x6f) r2 = open(&(0x7f0000000040)='./bus\x00', 0x204740, 0x2) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:46:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) 03:46:03 executing program 5: r0 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="25bca274769e620a2734fa0095e06f2687ecb86a546b29bf9e000000000000004e4d98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 03:46:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='cpuset$self\x00', r1}, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="e5da5b36681b21310defeb41be6901903d432925ef3638344fa383a52611ae4fbb10c89ad160cf15b8571adc2a260011d614ba00d7126137510081a328d3c415393e3371149b6ad8ff372863a5c94df28a66fdd248dce2b8937b5a243ef61edf7fb6cefc8cf35ac6f2992461812c5787ebfada656b43549f6ec70b326160806d2f52b716b2bbca13cb4b58444991e3ecb90a431a2a3c77938861a389d61231f3c0000000000000000000000000000000ee1763232a9373bb752ed4a78cc17e3da81dd349727b3749856974dd31235ca39fff7d53e71a0b6b3e162b10667fb5e45a4cfac7dba02d93d2bea67dd19598651fa0a278e68447cfa070d427650ad4ad8116b74ca971aff378857cac5f254e96e6f756cf439a0640a17edbf42b3d251d022a30925f9bfe2da693be544683fc061264eb145bc6ac15b704058a362f0edfa732d441ba85166c25274372791873240b43fb8da6dac35ff7231f904cfca5c3da11c4d3878afb"], 0x1) r2 = getpgrp(0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) pidfd_open(r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={r2, r6, r8}, 0xc) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:03 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) 03:46:03 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x7633c2, 0x93) creat(&(0x7f0000000080)='./bus\x00', 0x24) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x5, 0x5}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x6, 0x3}) r2 = open(&(0x7f0000000100)='./bus\x00', 0xd9ade653c60bb02a, 0x14b) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) [ 323.086190][T12819] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (158 log_block_size) 03:46:03 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:03 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) 03:46:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x108) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="e00bd2260ee5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bind$isdn(r2, &(0x7f0000000080)={0x22, 0x8, 0x43, 0xd1, 0x88}, 0x6) 03:46:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000002640)=[{&(0x7f00000003c0)="8a", 0x1}], 0x1) 03:46:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:04 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$usbfs(r0, &(0x7f0000001380)=""/70, 0x46) 03:46:04 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x102, 0xff, 0x2, 0xc, 0x2, @link_local}, 0x10) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:04 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:04 executing program 0: 03:46:04 executing program 2: r0 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000806080000fd1d00000000864000000005e6cbb23a1a000057a88aa46ae478db425c003f45b7f0004fca95c43e6cddb8b16284a8dccfb852757317438a90fac9c9ae88b53254da345d225e0a7f786ad162949b"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)={r1, 0xfffffbff, 0x7fff, "7a670be40fcd9b906ce67314f8fbfe3420e0806a58d3962971b0e1929be40db77ac68e0164052ca104cc631b1fb08b25b5d61140d7072c2fd7fc20aaa73c36dc550baf9720e72216a316fdb8c909ce674852a9e963eedfa9b2753b43c4ca4bce1e629ca9927b0b"}) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$usbfs(0xffffffffffffffff, &(0x7f0000001380)=""/70, 0x46) 03:46:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) [ 323.954056][ T32] kauditd_printk_skb: 25 callbacks suppressed [ 323.954120][ T32] audit: type=1804 audit(1586576764.619:294): pid=12859 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/129/bus" dev="sda1" ino=15871 res=1 [ 324.151827][ T32] audit: type=1804 audit(1586576764.739:295): pid=12860 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/129/bus" dev="sda1" ino=15871 res=1 [ 324.177763][ T32] audit: type=1804 audit(1586576764.749:296): pid=12859 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/129/bus" dev="sda1" ino=15871 res=1 [ 324.202327][ T32] audit: type=1804 audit(1586576764.749:297): pid=12860 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/129/bus" dev="sda1" ino=15871 res=1 [ 324.227481][ T32] audit: type=1804 audit(1586576764.809:298): pid=12859 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/129/bus" dev="sda1" ino=15871 res=1 03:46:04 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$VIDIOC_ENUMINPUT(r3, 0xc04c561a, &(0x7f0000000040)={0x82, "efff78d69b1228346151f1f3ce59dd53cca0be95c357896c5fb49b49b9e9261d", 0x2, 0x5, 0x1, 0x20000, 0x6000411, 0x6}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:05 executing program 0: 03:46:05 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$usbfs(0xffffffffffffffff, &(0x7f0000001380)=""/70, 0x46) 03:46:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @generic={0x3, "bf390fc1573bfb74ce16894ba60d"}, @isdn={0x22, 0xed, 0xfe, 0x1f, 0x6}, @llc={0x1a, 0x305, 0xb1, 0x7, 0x1f, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x200, 0x8}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x3, 0xd6, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000140)=""/214}, &(0x7f0000000240)=0x50) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) clone(0x22014880, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:05 executing program 0: [ 324.857639][ T32] audit: type=1804 audit(1586576765.219:299): pid=12880 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/130/bus" dev="sda1" ino=15766 res=1 [ 324.882734][ T32] audit: type=1804 audit(1586576765.299:300): pid=12886 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/130/bus" dev="sda1" ino=15766 res=1 [ 324.909948][ T32] audit: type=1804 audit(1586576765.299:301): pid=12880 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/130/bus" dev="sda1" ino=15766 res=1 03:46:05 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 324.934444][ T32] audit: type=1804 audit(1586576765.319:302): pid=12880 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/130/bus" dev="sda1" ino=15766 res=1 [ 324.958970][ T32] audit: type=1804 audit(1586576765.329:303): pid=12886 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/130/bus" dev="sda1" ino=15766 res=1 03:46:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$usbfs(0xffffffffffffffff, &(0x7f0000001380)=""/70, 0x46) 03:46:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x5, 0x58, 0x1, 0x0, 0xffffffff, 0x3, 0x2, 0x401, 0x9}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\n'], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0xfffd, @loopback}}) dup3(r1, r0, 0x0) 03:46:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000040)='./bus/file0\x00', 0x311243, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000080)=ANY=[], 0x0) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6fac, @any, 0x8, 0x1}, 0xe) 03:46:06 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$usbfs(r0, 0x0, 0x0) 03:46:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@remote, 0x26, r4}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$usbfs(r0, 0x0, 0x0) 03:46:06 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$usbfs(r0, 0x0, 0x0) 03:46:07 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:46:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:07 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000140)='/dev/md0\x00', 0x9, 0x5) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) openat$md(0xffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x200, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0xa58) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x2b00) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="28283b5fa69fe6941b0000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf250700000014000600766972745f7769666930000000000000"], 0x28}}, 0x4000) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 03:46:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, 0x0, 0x4000000000dc) 03:46:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x73682a85}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:08 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:46:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="e591347f6377719176e3d16ec300bc0d36465b2b8e73b3f420ff9ac1d42ffbcb063406580b9db3298dbeafb63e97fb72a76c60c394411448d6b1b17f3cf6455c"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:08 executing program 1: r0 = open(&(0x7f0000000100)='./bus\x00', 0xc0000, 0x181) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4008ae89, &(0x7f0000000240)={"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"}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000001c0)=0x95fa) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000040)={0x9, 0x1}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r4, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @llc={0x1a, 0x311, 0x0, 0x8, 0x9, 0x7, @multicast}, @isdn={0x22, 0xe9, 0x1, 0x7, 0xff}, @sco, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)='wg1\x00', 0x3, 0x12, 0x52b3}) clone(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4008ae89, &(0x7f0000001a40)={"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"}) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000080)={0x2000000000000124, [0x80000000, 0x139, 0x3]}) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r8, 0x0) 03:46:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 327.532400][T13007] binder: 12999:13007 ioctl c0306201 20000240 returned -14 [ 327.534960][T13006] kvm [13001]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xa25c3c0000000000 [ 327.637796][T13016] binder: 12999:13016 ioctl c0306201 20000240 returned -14 03:46:08 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) [ 327.749745][T13006] kvm [13001]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xa25c3c0000000000 03:46:08 executing program 4: 03:46:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="e54c89dd00a2d88d666503a0d76f28347c46fd6b931bbd8de2726f77069dc92d4f78920ca522d63d27390186b1b7"], 0x2e) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:08 executing program 0: 03:46:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:09 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000004, 0x2010, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8000, 0x2000) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000000c0)) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:09 executing program 4: 03:46:09 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:09 executing program 0: 03:46:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) recvfrom$x25(r0, &(0x7f0000000340)=""/196, 0xc4, 0x12103, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x12) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) fgetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '[\x00'}, &(0x7f0000000140)=""/219, 0xdb) read$alg(r1, &(0x7f0000000240)=""/228, 0xe4) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:09 executing program 4: 03:46:09 executing program 0: 03:46:09 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:09 executing program 4: 03:46:10 executing program 0: [ 329.358366][ T32] kauditd_printk_skb: 20 callbacks suppressed [ 329.358421][ T32] audit: type=1804 audit(1586576770.029:324): pid=13092 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/41/bus" dev="sda1" ino=16331 res=1 03:46:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) r3 = openat$snapshot(0xffffff9c, &(0x7f0000001440)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000080)=r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000080)=r5) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r7, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) io_submit(0x0, 0x8, &(0x7f0000001940)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f0000000140)="8c582c20a2bc4737b7b7913ef5b214357ac54f4bae0c9e0915d42784ba1271a20ee38a74d3d7e9a70065620fad6de786dae4e9087c4dbcca3c2283ff18f7b77e983091dd3e5aed46943001b456176b1d3bb7100af68b2ebbd8a3aae38eadf639db9c6a61e6efbc2b36617ec1add346a70e0a07ee1163b9a4ce9d32fe9caafe708e8bd62f7bb19164763b218cc5da2d9198ada80cd56850f4af61f26140e7cc7e2bbf4919df0ccbfd5eed41b775c04ec8b2ebdca731f95affbebc9e57c6fc5d180363d5d5dabc08ee212e98b8cb4f621add7898385f2730923230ef12dc4f87fdf496c2", 0xe3, 0x7f, 0x0, 0x1}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000340)="bae5846fbc148f6777de50b9fa7c17dd11aed9205a8df2a2c329a7d0a3f1220c21c1b8bc062af5bf02ad3d6b845c4a6883d0e81a353518657e3d1c7d928c749fa394a67faa52559f066d0bb92a4577cd3e99f951b6610f88afbb59b72a3262548508923cd66e03830e97e30f17cb368812a3ca67152e0bc94fdfd59fb02141ee6c22f3102040d7683f9eb31fe5670d442846267b68e900d9fc29c362375e3e5d6561603ba61546394091ebb9535a8c0e30c11378db3808e5cf450bee2596329aedc3aa475ce005c918211617f1118cbaab6927dcc27d77405b2ec0de8803bef297a5408c1552081cd31e0dcdc6a34832cfdfd69d7f64e5e7a15e5642f668a53d038c054296ef9151e93c232329934ab2e4b15fe84373a5130077ba36fc4022bc606265a44eaf6c1f35ab5b11055fb4ba5b2afd3fd427c52c14f6df8fe766febe6c0355a6e25c79a84ec7e6a80c5748fcf5e3e36375ccf3ea1f49d7f4b352a49e0f3b461cb8a1fb03d25ce248b133bef656b976096a1a1153c058431e86df78405e38d7b800819c3c85a56cad4bd8ce570926ee322dbe23f26ee353ae5fd42ba20b1a63d2231d287368ed4a8e43f5afa08ea35fe9e457b6c8300281bc0c97b991186ab7eb673a030b371e745d3aa9d6a1f823ef0d01203e785cc82d760936a5a58eba9ff87ac1522328b578da913b13125cd612b4d133f6a02ecd5424e561a073988f4ae3e0d6149bfcd02f1794e0b24eb4b5c71c9b4d1df546c16d190f6ae7751eab285d2fbd732b17e1ec8dcbbc58e7584217a1c0c2ecfb2b3b42bc21cc507a077967b063179677d5025c1390f157f763e1d54b4d35725e92861dc6c3901403e17a529f7804346bc97002d270ca2fb54de95ca0a9ab43bf2c7a2d863ad340e0b70f757d335fda1300fdc3c87ad047fc1147520cee19e61b7aa123ff3abf7871ebb0a69884835d2960799c7df3d7a26a3b056b193433a5d82fc1a575c0a54a34a820e03657e8dac56014119887431fcc35e2d2cd1a720452ea0cbd257e7b9843c4eb340f4dd9887e170fe812de177bceecb53508e27a9b4f4deb18b038d0997874bc12b9ca176d36321987a77e7170d134ac08261be8bbe3e108be55aec77a9f125ffc23fca01736165dd95e2a9c2493de4588ebdaa7fdcf59d7bf749089aff08d99cf2df3c9dfc01a3808095f6aff1f59de16e61548ff38d52b45527b352e5a8368246c3bde875c9bb5a9465a0e43f9b5406296121d1834e383a6ff1293879018b38eaa5016ca796a878c32e5ee8d9b0ab44f4aa4f88bee0ae08cab2e798fb3ff66ed356967c134e2604a2f5783bc6d55ce141b65786d7c73376d50d09875b2a6822124ba2f367835110a56a97f9ca0ee1f2a4a50683b9a1da3329877ff847d040d9bd24eb6af89f857ba08fd4dd3a16ab21e62ce70cbf6626abd47e70ab987e8508758260bed033d977a5ba5e770281cd4a6f61081e09d38b3d5943f3803893cec986f611ef3f2025665f9ff856872c3026cfe433b1973ff43d4e295d042b34d7e3e02ad2dcb2584d2b250b0a39c0cc6a04da061ea6a0d8d6e5ded6b00dd98aea4c1f6bc29e4fc080543da332d84e30f4b84bfb958d4cd1d08cfb9b1428361a4dd9d925386482f15cf1171bb6b7bdfd230544f6d3c12f5b4ad43adff356895147265b3623b7061f166f31c9c8670f295d5b13b6adbc654ba00270dc06b869ee7a86e8c2099e437ed7509de1bff4ec29b0222cacffeef62f36297442ae96053b0649c5eaa2b7c3c98e06cad69bffb95c5571989ec34d22a2a1b57f5c876bfbe52104ba2e52c9a2b70fee7b11e8974f58c5469bb8ccce41cc5e30d3a01f01c1948fc0afddfea4640b14a4c5cd75f04386c0eb9b2e26571deffbf7be47597c82c5ef712bad7ccb93083e756b2f9119e2e688287217c487d18109c82ea204a1c10c9d95918b8ce219c261516db5fdbd11244b6cbdcdf780cc504c75bf2a1adcc97430c6f8160d18eeb2bf667fa56d5d562a72cc8783a5155a207d544a1fb6b5b0878a15d47184cfc2c2ebcb6a318fe55c2742b597afc6173458d36b96e52cbe0f45bb941ec1af138620a6346811b03643cde4a3e80aa38cec7bb93741c72a290677529ad73e19a775ae97f957d33b8856b08ffae4157351a861c248c9a26f973fbfbb28c82f1ad69b58a754bae7885e3148d662cb01b53a90d63de4fb849933b1a77ad7824ebc245192ecf3ab6ba9d910a3872475b661a8564e4e4e3c35c5bdd084507e1086991ee6936bac87931483933df7c59e12ba3c21b9a412e3dbcb398867ef0dbae2d6a4cbbb08af728d2917239e56fcf699a986c5950fbaa561362640effdd262cfbd36b0e1b69c05a770a208f9ab00ab3bc79458d2effd9fcca988822e1e62f75a60676d975b925f544987822a8c642be3282598a9a8baa21a3f6970367352216a3e05e7b4bd110ec9cd6aff03fe079fb45eebf566bd91df8c49f6509197cdd9207f268e497cc053087ed826397c9781aaff38f2b072d2d94b39b4e99dd6eb2107cc7970bed1041292197eb09d1adeef75eb80223b5b2820c1aff23cbbcfbf24d4aff8a96836cbc6ab79856d71d9a784823db24387bc514649f1af1416ed4d0f186e2561d4550914c8357f1a2605f91cd3c3bbb19858daf91eff0078b432b1f3f0dc5cf321a82f34dc731a925dae8ab677a1187129ebec5f818eeaaba36ef6cae54e1d91ea49c5781b5179bd01cb98f08926cb26bce974d35f240377e87ac6ae27f76a9c87585b2d30d68c7f1a56907acbe241e8775f7a4463f61a941fb02dffb8d531f7fa0b16609fc7508dcba3212018fb0a66243a6c3b29a686ef3fcae61d9ccd3d9ea4cd2d373ce99020d36e2f517e35c956fb9db6d019ce2f6fb04f4119166ac1fbee8bdd14593085ec2c537e8ae72f00d2441a77f94f4018b47c3139908e9971a0c87fc349e107f3b0116fb7c9c8518c64629f8892f0d48ffcb01ca0d5ae29a350eb71043471d2485f9401d152727a0687342d1ebb846f653ec55ede2827ba6f0468ed13c2816d30594f270db3a92b6d332106a3a3ce1034c20d2530d972abf2ab6e1d9758095a9f9e22d7d4bd2c9d945bd028860b3dd9220e1d8fdc1f99a81d6e92596107f7e2c7316fbe18d95864192440aa3c36f86a6ef46e1811734160bdfcf126d2076d7b29a8eb0cb6b7994f9ad707b4a077a6c618408b9e05f0dd5fabfc2cc03013bbcbaf808a407611e52116108ea26ce9e0c56bce3f365589c1d5a350a29dfd1b29914059fc147b34314c037ba4993de753b2a0cc5f7e74d8c8fd06c58f552941b6aa4f1ca273c0edff7a9ed85e6a5f4f83d7688557ef38e838feefd5d122e28101d8fab96957ae4bd4d72c63c3be4a5f6e36bbe6367f32d92efbeac558483fa0c4f3200249943e4413a7dc9a5f911dd5628399fc18fe4bd253a1d4c569fcdd5f2d537da69ba4b9b30724ef7a67cf63d149b87ea67b7fe6fd1b520f78a0d94d5e30bce35804169cbfe35569a5b77d527ff7085b7b7411a209a5b5574adc7fdf18aa02fcbca2f8de991469e1d7e8dd8653964826dd07e1d7abf5a6d18510cd2cbbd920732a0c148e9f17a88658d591a39f47bf33980b40feae195fcdad68d9cf9dc06d448624dfb1117c13ce2ab02cd261114425500a1a14240963440d76cb09ddbeb4406c6f80ae9dc3d3533afffb9042e84d997ee798815dbb3d0933a57b919c2923f83bf38740b72df245eb639802fc5f3138ab08ba60b4b6a6d30affa0d2a38ff422d849b50a1a082fce3edfc0318ef0ddb79c337334bced9558a51a22dafeed5643bb5bd0b81433e0163764e28fde23ad403dc34c8a57ecba85cafb6bf3d5b3921802b84cd2696721d93395bf84d1bda5ebb8a6e24eb46a4259c292db3fd3dd27519a9281d55b3512e888518023ad28eed509e1d3d2413517054ff570358fbe25d649b4ec9f04399a02a1ad96d86a950b3e90b9e8242837350718a246999b720ef09346142a470232841e47a510c8082f51b29e364302822a10cf4182243fdc3aed105cb0c1ad63a43a4bb21742a093d6f4cbfa75718bed7fcf700b201f4c0e97ce13bf5dba768ed14d97e60265825194e237624901028cc152e87960b32c9d9f8b24cf73fea1f0ca1277942d98265630b07256be8dd3171ee55d940911e8293ffa6a0ff46134377c6da70f69626ed645eb9b9a94b8e11313b5e75a477391a71e56a98561986f3f091e598945bb621c6f884e81eb25f16551e7317bd56049d4dda8355ce526526c46ecb963b0b0926777137a88ee64390d09d852853edf40f0969570be9b96d97624816d0f59518f382cdc51c99bd9aa563912a38afaf51927785342a74698077d90eace85f4c68093cd7a74b4f82dd00c597d509e16bdcadaf4dbf4bb6cdf676c6401f9acc7e5ba880307f4f2346cc75445295b18eed31bd11700f0d08914992473c8a501aecf570b423fd964ae0bc3c65c8eb671b59025efa61b0707235a7d165aec03054bc1c460c2ff953ed3a8080544c789429dfb46da969d2002f55c51a66a49e559245bfa35c2bee1f291522c6140b0031290f58b82ce71df12db4bd6e368ff298f5d43d2c2dfc96f63f6165f0602040dfa5be94b563f47d1f39c053e213380c701bd5451278c69ebb891a213e7b4ec06dc3eaf9df8ab227f4b4102982913313d45050cf2fe30d458bd48f37383fbef8cd9033f0511403f94ae9c0530dc3f7cb8631fcca2cf03210a24e60b0259d7637da9b5d8a3b7f5581d069a4352e2f4d1dee0b1b3e6a9a00ebdd88dae147e71b3f779d247a3e05e5cccd19138966156f6d6f1e14968170fa7bad904a14bce3b8c7afb9b4a31560be575ed8ef50df64a7ad66b827d98454158a94d5a25eca7271a3d95398bae0f5de35c5600811bac4f807990854e9f2dcf629795848149c175ea451568705a91f3d67e4fbd07e10dbed89605881357206505e42823edd8a83641788a3289e1725df488d3529817191889a83b82824f7c16b19e80816f1c4d168114c013a58d9121e669d019c5d980555beb604ead75d3e446bd04043225bbef0a9b84c8a6b41154ea69ba45a8228ca24578c294654b74a99ec18fd49d6a82b360f89dc359917067487def5b4867493690c73e5a58401adb6fe10b6ac3405ccb57671db002b48d3f10bd597f5714390fdec340db518fc0ccb01658bb4b8edf840a71d1e70a70d07a424ef1711c2eeca90a027fb22bedfed0809a7e0b6f015773ab08fd294d489d214604161cc19240a920b6f57ae403a11742e580b2c7e550d59a996863911fb62ec03320aa2db5bd9a2aebf3d4bf8bacc1dd3b2c4b70de3d8c755a5ba5ae02fd3b7c1d0782a10423943956b44c06faa461e3336c8b6aad5be091cc4636d95cd61936b493dcd3158686fbda492c1ddb405003e90b3246271a40687e8c65da204455c369984fdb158ebb0889f8d89b6983dab45e5fd094ae3490b03fd4abdfcb8abc7b925d9502be9e138a62a5f224812dda42f11f916f302c353d7d05ddf850eb3d4aab221df2ec639e089c6c2ab2f0e55197ce065cf2eb10288cb7c67fe072d000515ea26dec17be5c3c6d81ae89c974017467350c7375f64026a3c85865e3d346fd8724c15e520639528bbaa10ff6f89bef2e81b421400404a0aa994d1ed451fdd42476b959393c47bc8c8ab1dba81f5de9a947d1f5fbf13a0526873e0605878247baca21497728a862d0dcc93df35455e4b9673d6f583b4dc1de803fea164887ce3933ed9716ecec5a324184d6071c38b0cc3", 0x1000, 0x2, 0x0, 0x2, r1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x5, 0x80, r2, &(0x7f0000001380)="24c1c018d871b5790e8bbec0bb49beb5c85fd7240ebbf70e28500057924b48d674012ad2081c576d7937aa3b3e357253c3ceeeb169b7a690a9b48d53c06fc52a8f24fb60b3f9ccc3172400a2222baff92f7298ba5a9581775d8530c380ab0b0df88a00fba816818fef7569487e582c922547a93c20667df4dbe854e31f56293b7713b6b079af8c4c", 0x88, 0xb6, 0x0, 0x2, r3}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0xc, 0x101, r4, &(0x7f00000014c0)="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", 0xfc, 0x150, 0x0, 0x1cb88ecf73d5e319}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000001600)="86b5c754c9d8d33dc7e0053e29ac56451450f514d1", 0x15, 0x9, 0x0, 0x2, r1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x6, r5, &(0x7f0000001680)="b932cb047735140b0f3a841a7dccf6aa58e439e91004fe0335685e1e33e24b131c94c39ddd3d80cda52f4bebb76c2b5137b2a8ecb9453bb0189e0ec5b907e3fc63a576aafac664dfb324dd9091baa8e2fdedde9834965854d54daaaaafed2d19f5b1b9fd66f21f3d7dbaeb829ba9be21473453937d24b3502c24fddadfefe26b3e4789db93cdb5e7ab72c0ce9f5a35a97f497e3f341bacd4c63c3cf763a959dccc96e1f723de0efcbd961d72672b20472e1e472534424674e5dbd5b7723a17493e819be9e4c9d4c04ed057895c0c038a8d7674dfcead4eb9c666faa531d562d873b9f4db30", 0xe5, 0x0, 0x0, 0x2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x80, r6, &(0x7f00000017c0)="9a5fc412a0f9b2276a4250e5ada8794b30ff9f81ed211f4ccaa7c3cd64050de48c29756a4d13c2b9685eb8ef349c666cd1aac712a324d890d350454b567f4736e4a75007bfb6b4d062fcc8e1a0031cbe83437d45b8d97e12b8efffa950a25800015c73c104dea657a084ccad6e9cc259ae9c899130aeccbfee00d503e4d4a07a1bde71f6a0127a", 0x87, 0x100000000, 0x0, 0x0, r1}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x3, 0x7f, r0, &(0x7f00000018c0)="8d09a1a118b56f8300f2841d04084f90e6bb84db03c2f2a0129c0e5b5f0eddce1d2f03b66cec631c", 0x28, 0x7c, 0x0, 0x3, r7}]) ioctl$VIDIOC_QBUF(r1, 0xc044560f, &(0x7f0000000080)={0xc6fd, 0x2, 0x4, 0x8, 0x6, {}, {0x1, 0x0, 0x1, 0xff, 0x2, 0xa5, "3c3f8985"}, 0x5, 0x3, @userptr=0x2, 0x7}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000080)=r8) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x17) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:10 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:10 executing program 0: 03:46:10 executing program 4: 03:46:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = getpid() rt_tgsigqueueinfo(r2, r3, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000100)={&(0x7f0000002300)=""/4112, 0x1010}) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 329.923383][ T32] audit: type=1804 audit(1586576770.589:325): pid=13110 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/42/bus" dev="sda1" ino=15780 res=1 03:46:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:10 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:10 executing program 4: 03:46:10 executing program 0: [ 330.429899][ T32] audit: type=1804 audit(1586576771.099:326): pid=13123 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/43/bus" dev="sda1" ino=16351 res=1 03:46:11 executing program 4: 03:46:11 executing program 0: 03:46:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) [ 330.671202][ T32] audit: type=1804 audit(1586576771.329:327): pid=13132 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/43/bus" dev="sda1" ino=16351 res=1 03:46:11 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:11 executing program 4: [ 330.985732][T13139] ptrace attach of "/root/syz-executor.2"[13114] was attempted by "/root/syz-executor.2"[13139] 03:46:11 executing program 0: [ 331.024731][ T32] audit: type=1804 audit(1586576771.689:328): pid=13142 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/44/bus" dev="sda1" ino=16326 res=1 03:46:11 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@remote={[], 0x1}, 0xf, 'wg2\x00'}) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 331.197204][ T32] audit: type=1804 audit(1586576771.789:329): pid=13148 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/44/bus" dev="sda1" ino=16326 res=1 03:46:11 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:12 executing program 4: 03:46:12 executing program 0: 03:46:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1d9043, 0x73) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="04163ec185f835c4880c0f747aa557d665fee2e0d8d736ea723dad84e1b389a43fb12cc3597169b430bc474ff5580939d6039e0dd75a864dd5eeca2c22d0c10e84b9774871280a3df17f4a4998bce20f3723d5cc557e3faf8d66c6cdefd6116edb4e"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) [ 331.703854][ T32] audit: type=1804 audit(1586576772.369:330): pid=13165 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/45/bus" dev="sda1" ino=16339 res=1 [ 331.813041][ T32] audit: type=1804 audit(1586576772.419:331): pid=13168 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/45/bus" dev="sda1" ino=16339 res=1 03:46:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:12 executing program 4: 03:46:12 executing program 2: socket(0x10, 0x803, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60040, 0x103) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x7f, 0x3, 0x15, 0x1, "7941cf06e4b79bb3f1ba23d6b9ba83b19a4bd87ef9df4698e33f57ed4d045cd2bffe0a4c4f5cf67c926f28dbccf8dc0e3e65cb86103f04437dd5d8dd084c2c0d", "a416b505a38b04af00a5442f8c651cf9d09a0cbec54a35ff08b4d97d4f713369", [0x3ff]}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140a, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:12 executing program 0: 03:46:12 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:46:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:13 executing program 4: 03:46:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000002c0)={0x6, @capture={0x1000, 0x1, {0xffff8000}, 0x9, 0x80}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x0, 0x1e2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x48, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='e'], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:13 executing program 0: [ 332.550941][ T32] audit: type=1804 audit(1586576773.219:332): pid=13193 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/46/bus" dev="sda1" ino=16354 res=1 03:46:13 executing program 4: [ 332.714443][ T32] audit: type=1804 audit(1586576773.339:333): pid=13198 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/46/bus" dev="sda1" ino=16354 res=1 03:46:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:13 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:46:13 executing program 0: 03:46:13 executing program 4: 03:46:14 executing program 0: 03:46:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:14 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:46:14 executing program 4: 03:46:14 executing program 0: 03:46:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)=""/1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000080)={0x3}) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:14 executing program 4: 03:46:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:14 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:14 executing program 0: 03:46:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=""/50, &(0x7f0000000080)=0x32) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="89"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:15 executing program 4: [ 334.531049][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 334.531111][ T32] audit: type=1804 audit(1586576775.199:338): pid=13269 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/49/bus" dev="sda1" ino=16376 res=1 03:46:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) clone(0x800e0d00, 0x0, 0x0, &(0x7f0000000100), 0x0) 03:46:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:15 executing program 0: 03:46:15 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:15 executing program 2: 03:46:15 executing program 4: 03:46:15 executing program 0: [ 335.201243][ T32] audit: type=1804 audit(1586576775.869:339): pid=13290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/50/bus" dev="sda1" ino=16356 res=1 03:46:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x74}}, 0x0) 03:46:16 executing program 4: 03:46:16 executing program 2: 03:46:16 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:16 executing program 0: 03:46:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 335.852518][ T32] audit: type=1804 audit(1586576776.519:340): pid=13308 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/51/bus" dev="sda1" ino=16378 res=1 03:46:16 executing program 2: 03:46:16 executing program 4: 03:46:16 executing program 0: 03:46:16 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) 03:46:17 executing program 2: 03:46:17 executing program 4: 03:46:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:17 executing program 0: [ 336.558102][ T32] audit: type=1804 audit(1586576777.229:341): pid=13329 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/52/bus" dev="sda1" ino=16369 res=1 [ 336.721549][ T32] audit: type=1804 audit(1586576777.309:342): pid=13329 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/52/bus" dev="sda1" ino=16369 res=1 03:46:17 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) 03:46:17 executing program 2: 03:46:17 executing program 4: 03:46:17 executing program 0: [ 337.045481][ T32] audit: type=1804 audit(1586576777.709:343): pid=13344 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/53/bus" dev="sda1" ino=16333 res=1 03:46:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 337.201845][ T32] audit: type=1804 audit(1586576777.819:344): pid=13347 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/53/bus" dev="sda1" ino=16333 res=1 03:46:18 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) 03:46:18 executing program 2: 03:46:18 executing program 4: 03:46:18 executing program 2: 03:46:18 executing program 0: 03:46:18 executing program 4: [ 337.733801][ T32] audit: type=1804 audit(1586576778.399:345): pid=13362 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/54/bus" dev="sda1" ino=16394 res=1 03:46:18 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000180)={r2, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x7) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) openat$cachefiles(0xffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x410400, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 03:46:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x0, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 337.876696][ T32] audit: type=1804 audit(1586576778.519:346): pid=13365 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/54/bus" dev="sda1" ino=16394 res=1 [ 338.006224][ T32] audit: type=1804 audit(1586576778.599:347): pid=13368 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/133/bus" dev="sda1" ino=16397 res=1 03:46:18 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) 03:46:18 executing program 4: 03:46:18 executing program 2: 03:46:18 executing program 1: mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000009140)={'wg2\x00', r3}) 03:46:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) fallocate(r0, 0x70, 0x6, 0x12c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10, r1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000240)=0xc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x0, 'virt_wifi0\x00', {}, 0x9}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x3f, 0x0, 0x0, 0x1, 0x20}, 0xc) writev(r3, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000000)=0x50000) 03:46:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000000fdff001700000004000180"], 0x18}}, 0x0) 03:46:19 executing program 2: 03:46:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x0, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:19 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) 03:46:19 executing program 4: 03:46:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) fallocate(r0, 0x70, 0x6, 0x12c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10, r1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000240)=0xc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x0, 'virt_wifi0\x00', {}, 0x9}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x3f, 0x0, 0x0, 0x1, 0x20}, 0xc) writev(r3, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000000)=0x50000) 03:46:19 executing program 2: 03:46:19 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='!]\x00', 0x3) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:19 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) 03:46:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x0, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:20 executing program 4: 03:46:20 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') 03:46:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) [ 339.554783][ T32] kauditd_printk_skb: 9 callbacks suppressed [ 339.554843][ T32] audit: type=1804 audit(1586576780.219:357): pid=13430 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/57/bus" dev="sda1" ino=16401 res=1 [ 339.741345][ T32] audit: type=1804 audit(1586576780.309:358): pid=13437 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/135/bus" dev="sda1" ino=16398 res=1 [ 339.766440][ T32] audit: type=1804 audit(1586576780.329:359): pid=13428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/135/bus" dev="sda1" ino=16398 res=1 [ 339.790880][ T32] audit: type=1804 audit(1586576780.329:360): pid=13437 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/135/bus" dev="sda1" ino=16398 res=1 [ 339.815862][ T32] audit: type=1804 audit(1586576780.339:361): pid=13433 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir575122328/syzkaller.YztdHC/57/bus" dev="sda1" ino=16401 res=1 03:46:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 339.840704][ T32] audit: type=1804 audit(1586576780.439:362): pid=13428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/135/bus" dev="sda1" ino=16398 res=1 03:46:20 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x101}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0}}], 0x400000000000085, 0x900000000000000) 03:46:20 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="b3"]}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) 03:46:20 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x200b0200, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x6, 0x6, 0x9, 0x6}, 0x6) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000001c0)=""/5) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab3}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4568000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8c9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffbff}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000000) 03:46:20 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 03:46:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000dc) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x41) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{}, {}]}) r0 = socket(0x10, 0x803, 0x0) write$binfmt_elf32(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4606060901092c690a0000000000000002000600ff0100002700000038000000b600000006000000ff00200001000400ff0302000000000033c05d6b230985d6a16b66bb878303a583358827d202217115c366f4ef9e213d746a76fc8ea01b90ac46a80be861fc5c76f85cf53ffea9bd216cce2fefd1cbba0e6418996226bd7862d1d27562852dbdcf1887da70c391a837013148a5a5e6f75977d236e0542e1c29ac74477810a5a6bcf39a6e350e867a470f92c254060d28b699ac652e2287c814e6a2761d7057393d9cf543cdc13be4"], 0x72) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) 03:46:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x61) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getpeername$inet(r0, 0x0, 0x0) [ 340.730004][T13466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=13466 comm=syz-executor.3 [ 340.744481][ T32] audit: type=1804 audit(1586576781.399:363): pid=13465 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/136/bus" dev="sda1" ino=16436 res=1 [ 340.769490][ T32] audit: type=1804 audit(1586576781.419:364): pid=13465 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/136/bus" dev="sda1" ino=16436 res=1 [ 340.794507][T13465] tipc: Enabling of bearer rejected, failed to enable media [ 340.841065][T13471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=13471 comm=syz-executor.3 [ 340.862056][T13462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=13462 comm=syz-executor.0 [ 340.967967][T13477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=13477 comm=syz-executor.0 [ 341.295867][ T32] audit: type=1804 audit(1586576781.489:365): pid=13465 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/136/bus" dev="sda1" ino=16436 res=1 [ 341.320935][ T32] audit: type=1804 audit(1586576781.529:366): pid=13472 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/136/bus" dev="sda1" ino=16436 res=1 03:46:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:22 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x53) 03:46:22 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x8b, [], @ptr}}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:22 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10, r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x3f, 0x0, 0x0, 0x1, 0x20}, 0xc) writev(r2, &(0x7f0000000080), 0x53) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x50000) [ 341.680539][T13495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=13495 comm=syz-executor.3 [ 341.745244][T13498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=13498 comm=syz-executor.3 03:46:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0xa6, &(0x7f0000000080)="60a60b2d69ddf24b4078b7421da91fd5141b3e949ca0ad1ecf2e2185c0e0a1578bc9a24eb216f2fb3487407af0901cf3372cbab30d6ed1d1a5490f5470dd9c791eee0652d434baf87f93cf6a8ce3f963fce6867f56c222b7203b16ed7977efc0ef8a3830781fdf2138859eacd2805b875376887e969de844c28c2859a76eda74c296bcc23b51c3715045e8b2e9ad6572a7dd8e99e521d4357519c8ed13eb19432dd45c847cfa"}) 03:46:22 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x8b, [], @ptr}}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:23 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) 03:46:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:23 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10, r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x3f, 0x0, 0x0, 0x1, 0x20}, 0xc) writev(r2, &(0x7f0000000080), 0x53) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x50000) 03:46:23 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x50000) 03:46:23 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000000)=""/136) semctl$IPC_RMID(r2, 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:46:23 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x8b, [], @ptr}}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:46:23 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x50000) [ 342.630390][T13535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=13535 comm=syz-executor.3 [ 342.663735][T13535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=13535 comm=syz-executor.3 03:46:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000dc) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x41) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{}, {}]}) r0 = socket(0x10, 0x803, 0x0) write$binfmt_elf32(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4606060901092c690a0000000000000002000600ff0100002700000038000000b600000006000000ff00200001000400ff0302000000000033c05d6b230985d6a16b66bb878303a583358827d202217115c366f4ef9e213d746a76fc8ea01b90ac46a80be861fc5c76f85cf53ffea9bd216cce2fefd1cbba0e6418996226bd7862d1d27562852dbdcf1887da70c391a837013148a5a5e6f75977d236e0542e1c29ac74477810a5a6bcf39a6e350e867a470f92c254060d28b699ac652e2287c814e6a2761d7057393d9cf543cdc13be4"], 0x72) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2021}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3f}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3f}, @ETHTOOL_A_LINKMODES_OURS={0x30, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x217}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x840}, 0x640088c0) 03:46:23 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x70, 0x6, 0x0, 0x40, 0x8c, 0x0, 0x7, 0x41810, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x376a, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x48011, 0x8001, 0x1, 0x6, 0x2, 0xffffff53, 0xe8}, r1, 0xb, 0xffffffffffffffff, 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:46:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 03:46:23 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x8b, [], @ptr}}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:23 executing program 2: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x2, &(0x7f0000000300)) 03:46:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2) [ 343.357046][T13573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=13573 comm=syz-executor.5 03:46:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 343.397568][T13576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13576 comm=syz-executor.5 03:46:24 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000100)={0x10}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) io_uring_enter(r3, 0x1f, 0x8, 0x3, &(0x7f00000000c0)={[0x874, 0x7]}, 0x8) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x200001, 0x0) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000180)={0xa, {0xa, 0x2, 0x2}}, 0xa) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) [ 343.631571][T13592] new mount options do not match the existing superblock, will be ignored 03:46:24 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) [ 343.683958][T13592] new mount options do not match the existing superblock, will be ignored 03:46:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0xc080aebe, &(0x7f0000001c00)) 03:46:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:24 executing program 0: fchdir(0xffffffffffffffff) gettid() ptrace(0x10, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x1004}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000030000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32], 0x2c, 0x4004014}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0xfffd, @loopback}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 344.013147][T13605] BPF:[1] INT (anon) [ 344.018860][T13605] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 344.025922][T13605] BPF: [ 344.028745][T13605] BPF:nr_bits exceeds 128 [ 344.033149][T13605] BPF: [ 344.033149][T13605] [ 344.071460][T13606] BPF:[1] INT (anon) [ 344.076158][T13606] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 344.083058][T13606] BPF: [ 344.086059][T13606] BPF:nr_bits exceeds 128 [ 344.090427][T13606] BPF: [ 344.090427][T13606] 03:46:24 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:25 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='n']) 03:46:25 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 344.452348][T13634] BPF:[1] INT (anon) [ 344.456797][T13634] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 344.463829][T13634] BPF: [ 344.466754][T13634] BPF:nr_bits exceeds 128 [ 344.471169][T13634] BPF: [ 344.471169][T13634] 03:46:25 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:25 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000300)=0xba4, 0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x8000, @mcast2, 0x2}}, {{0xa, 0x4e24, 0x4, @empty, 0x5}}]}, 0x18c) r3 = openat$full(0xffffff9c, &(0x7f0000000780)='/dev/full\x00', 0x4000, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = open(&(0x7f0000000100)='./bus\x00', 0x92140, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x7f817000) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000080)=r7) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000080)=r6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x100, &(0x7f0000000080)=[r5, r6]}, 0x2) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="141400001702000b002e2f4c65732f66696c6530"], 0x14) 03:46:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 344.707168][T13640] overlayfs: unrecognized mount option "n" or missing value [ 344.731817][T13643] overlayfs: unrecognized mount option "n" or missing value 03:46:25 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1}) pipe(&(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440), 0x0) 03:46:25 executing program 0: socket(0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup3(r1, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 344.801644][T13647] BPF:[1] INT (anon) [ 344.806040][T13647] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 344.813032][T13647] BPF: [ 344.816916][T13647] BPF:nr_bits exceeds 128 [ 344.821307][T13647] BPF: [ 344.821307][T13647] [ 344.861067][ T32] kauditd_printk_skb: 20 callbacks suppressed [ 344.861131][ T32] audit: type=1804 audit(1586576785.529:387): pid=13650 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/140/bus" dev="sda1" ino=16456 res=1 03:46:25 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:25 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 345.076310][ T32] audit: type=1804 audit(1586576785.749:388): pid=13650 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/140/bus" dev="sda1" ino=16456 res=1 03:46:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 345.241279][ T32] audit: type=1804 audit(1586576785.779:389): pid=13653 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/140/bus" dev="sda1" ino=16456 res=1 03:46:25 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40046629, &(0x7f0000000200)={0x100000}) [ 345.414925][T13672] serio: Serial port pts0 [ 345.470162][T13679] BPF:[1] INT (anon) [ 345.474264][T13679] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 345.481947][T13679] BPF: [ 345.484794][T13679] BPF:nr_bits exceeds 128 [ 345.489297][T13679] BPF: [ 345.489297][T13679] 03:46:26 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:26 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) 03:46:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 345.813006][T13696] BPF:[1] INT (anon) [ 345.817412][T13696] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 345.824315][T13696] BPF: [ 345.827395][T13696] BPF:nr_bits exceeds 128 [ 345.831766][T13696] BPF: [ 345.831766][T13696] 03:46:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 345.855356][ T32] audit: type=1804 audit(1586576786.519:390): pid=13698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/141/bus" dev="sda1" ino=16463 res=1 [ 346.002792][ T32] audit: type=1804 audit(1586576786.559:391): pid=13698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/141/bus" dev="sda1" ino=16463 res=1 [ 346.030197][ T32] audit: type=1804 audit(1586576786.569:392): pid=13698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/141/bus" dev="sda1" ino=16463 res=1 [ 346.054657][ T32] audit: type=1804 audit(1586576786.589:393): pid=13703 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/141/bus" dev="sda1" ino=16463 res=1 03:46:26 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:26 executing program 5: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') sendfile(r3, r4, 0x0, 0x1) 03:46:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) 03:46:26 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0x73e801a9, 0x401, 0x0, 0x84]}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)=""/113, 0x71) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 03:46:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:27 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 346.589415][ T32] audit: type=1804 audit(1586576787.259:394): pid=13727 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/142/bus" dev="sda1" ino=16475 res=1 [ 346.605227][T13730] BPF:[1] INT (anon) [ 346.618286][T13730] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 346.625359][T13730] BPF: [ 346.628621][T13730] BPF:nr_bits exceeds 128 [ 346.633009][T13730] BPF: [ 346.633009][T13730] 03:46:27 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 346.765319][ T32] audit: type=1804 audit(1586576787.429:395): pid=13743 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/142/bus" dev="sda1" ino=16475 res=1 [ 346.832585][T13727] debugfs: Directory '13727-5' with parent 'kvm' already present! 03:46:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ext3\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 03:46:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 347.019678][ T32] audit: type=1804 audit(1586576787.469:396): pid=13727 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/142/bus" dev="sda1" ino=16475 res=1 03:46:27 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f00000000c0)={0x2, 0x401}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4001, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) openat$md(0xffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x101400, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:27 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) [ 347.165522][T13756] BPF:[1] INT (anon) [ 347.169706][T13756] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 347.177287][T13756] BPF: [ 347.180114][T13756] BPF:nr_bits exceeds 128 [ 347.184493][T13756] BPF: [ 347.184493][T13756] 03:46:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) [ 347.317715][T13759] EXT4-fs (md0): unable to read superblock 03:46:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:46:28 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 347.663718][T13783] BPF:[1] INT (anon) [ 347.668103][T13783] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 347.675720][T13783] BPF: [ 347.678554][T13783] BPF:nr_bits exceeds 128 [ 347.682928][T13783] BPF: [ 347.682928][T13783] 03:46:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, "8a36253de08d8b9d0000000900"}) r3 = syz_open_pts(r0, 0x1) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r3, r0, 0x0) 03:46:28 executing program 1: r0 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x56) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:46:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:28 executing program 0: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) read$alg(r0, 0x0, 0x0) 03:46:28 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, [], @ptr}}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 348.302462][T13810] BPF:[1] INT (anon) [ 348.306942][T13810] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 348.313940][T13810] BPF: [ 348.316844][T13810] BPF:nr_bits exceeds 128 [ 348.321222][T13810] BPF: [ 348.321222][T13810] 03:46:29 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x0, 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x4000000000002d0, 0x0) 03:46:29 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x121182, 0x141) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) 03:46:29 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x0, 'veth1_to_team\x00'}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 03:46:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:29 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, [], @ptr}}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 349.000649][T13838] BPF:[1] INT (anon) [ 349.005054][T13838] BPF:size=5 bits_offset=76 nr_bits=68 encoding=(none) [ 349.011958][T13838] BPF: [ 349.015038][T13838] BPF:nr_bits exceeds 128 [ 349.019409][T13838] BPF: [ 349.019409][T13838] 03:46:30 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xffffffff}, 0x19000, 0x0, 0xfffffffc}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) semget$private(0x0, 0x0, 0x0) mlockall(0x0) pipe(0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffefffffffc, 0x6c404, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x4, @perf_bp={&(0x7f0000000100), 0x3}, 0x8000000200004d1e, 0x800007c, 0xffffffff, 0x6, 0x6, 0x10001}, 0x0, 0x1, 0xffffffffffffffff, 0x9) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x6, 0x800) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="e5ef06b2d7dc696a8e1230aa84226b090ca0a12d52b98bc677337653f148806d75e0", 0x22}, {&(0x7f0000000280)="c0b3f66779c653b34c2e2d73917b1cc871f8f6fe436fb4a60ce2dc46c2fd1bd5b79b9acf61318e185e46e089c9514f615a0da2913bfcc9d64e6e375db4704f22906f9a06cd35ea5486c206d810e325c5a674311f999c08f6648b2e17027c5e172187738a78763d9f05f114d191cb21ceabbd17a25a60996a1a3dff66db4cbff02884f645", 0x84}, {&(0x7f0000000340)="d2ba5a8677e8c4902f6ab354d9fc5332524baa486a256490cb3696d2ad42ee0f32d6322ff346ad3960f04579f9f65c09c553458cde1e4f4b79c08e5169e7155f40afd93f46afad8e389c9ae9f0b7c85b95c34110a9490b11f28126230e63064b70e8513af76951ab1fa24b6394d392c6c600489f3d38ef2bc6fd1ff0971f56faf98999dab9e6ec4573a9b200f0b341125f0c14cf555c3470f9cb9088209bf91035321946aa111d23d491271f8d82bc50211eecfe1120f3a15bac5ac8c0255a529b915b8c75df08e4eb9b698f", 0xcc}, {&(0x7f0000000440)="68860190be862206514100315ff0e8643d08f3a17384986d0fa0e31e4839a331f11378a440ce79a9aab333c9a7ff30e06a75bc6fcb4ea85a11e24134ec74e3765223b7c87f5e9515bd6ee87ddb2f11a0de943b18f5e929fe0fbfacc797e803ecdc8f8377b736f2386e287aca85834f22261a1b4afec2bc18b481b7fc1f1ad06563dd1c", 0x83}, {&(0x7f00000000c0)="568e0c97f3f75a699b8046ac1ed30ddae02e334570af98e080d450a4f2cdc39342ea53912c9bec60a9895cbee693ff1b025b82d8f48db78e03f6", 0x3a}], 0x5, 0x7f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @identifier="88723d16e76462b60db9fa5c18ef85b8"}}) open(0x0, 0x141042, 0x0) lsetxattr$security_evm(&(0x7f0000000240)='./bus\x00', &(0x7f0000000500)='security.evm\x00', &(0x7f0000000680)=@v2={0x5, 0x0, 0x13, 0x3f, 0x7c, "7fc719b8ff6343517497dfd07df4041af2fc6930db87168f928a5f8e4684da0be34800738b8ffe05872d1d77e3e32d0ba4c0b99b1b30bb5b021b2462989fac11c38a6aaff4091cfef20e7ea146050607b7fbff4cb17de8aab0077f896cafae6bd5eeb1bd42cac40c5e8f67a4b0a0467a843315d69de658e3ed68c97d"}, 0x85, 0x1) pipe(&(0x7f0000000000)) 03:46:30 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80000, 0x123) 03:46:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:30 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 03:46:30 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, [], @ptr}}) perf_event_open(&(0x7f0000000000)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001000000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 03:46:30 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 349.779929][T13867] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:46:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 349.873734][ T32] kauditd_printk_skb: 18 callbacks suppressed [ 349.873797][ T32] audit: type=1804 audit(1586576790.539:415): pid=13875 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/146/bus" dev="sda1" ino=16511 res=1 [ 349.932200][ T32] audit: type=1804 audit(1586576790.589:416): pid=13866 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/146/bus" dev="sda1" ino=16511 res=1 [ 349.969608][T13872] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.982147][T13872] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 349.992931][T13872] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 350.008037][T13872] 8021q: adding VLAN 0 to HW filter on device ipvlan2 03:46:30 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x8b, [], @ptr}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 350.091723][ T32] audit: type=1804 audit(1586576790.709:417): pid=13866 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/146/bus" dev="sda1" ino=16511 res=1 [ 350.116304][ T32] audit: type=1804 audit(1586576790.709:418): pid=13875 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/146/bus" dev="sda1" ino=16511 res=1 03:46:30 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 03:46:30 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xd0101, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x0, 0x6}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x2}, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) [ 350.381290][T13922] binder: 13921:13922 ioctl c0306201 20000240 returned -14 03:46:31 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000340)=""/142, 0x0, 0x8e, 0x8}, 0x20) [ 350.460568][T13922] binder: BINDER_SET_CONTEXT_MGR already set [ 350.466918][T13922] binder: 13921:13922 ioctl 40046207 0 returned -16 [ 350.603831][T13931] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 350.640411][T13872] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 350.653216][T13872] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 350.669173][T13872] 8021q: adding VLAN 0 to HW filter on device ipvlan2 03:46:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 350.740698][ T32] audit: type=1804 audit(1586576791.409:419): pid=13942 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/147/bus" dev="sda1" ino=16521 res=1 03:46:31 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x8b, [], @ptr}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 350.866790][T13944] BPF:hdr_len not found 03:46:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:31 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000340)=""/142, 0x0, 0x8e, 0x8}, 0x20) [ 350.913232][ T32] audit: type=1804 audit(1586576791.549:420): pid=13942 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/147/bus" dev="sda1" ino=16521 res=1 [ 350.938801][ T32] audit: type=1804 audit(1586576791.579:421): pid=13938 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/147/bus" dev="sda1" ino=16521 res=1 [ 350.964473][ T32] audit: type=1804 audit(1586576791.579:422): pid=13942 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/147/bus" dev="sda1" ino=16521 res=1 [ 350.989656][ T32] audit: type=1804 audit(1586576791.639:423): pid=13938 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/147/bus" dev="sda1" ino=16521 res=1 03:46:31 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0x72e, 0x9, 0x80000001}) [ 351.201568][T13953] binder: 13949:13953 ioctl c0306201 20000240 returned -14 [ 351.250785][T13955] BPF:hdr_len not found [ 351.445843][ T32] audit: type=1804 audit(1586576792.079:424): pid=13962 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/148/bus" dev="sda1" ino=16503 res=1 03:46:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x19}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB="010329"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:46:32 executing program 4: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x8b, [], @ptr}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:32 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000340)=""/142, 0x0, 0x8e, 0x8}, 0x20) 03:46:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:32 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) epoll_pwait(r0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x400, &(0x7f0000000140)={[0x8, 0x4]}, 0x8) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0x11}}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:46:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 351.803119][T13980] binder: 13978:13980 ioctl c0306201 20000240 returned -14 03:46:32 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x8}, 0x20) [ 351.857342][T13982] BPF:hdr_len not found 03:46:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) [ 352.201129][T14008] BPF:No type found 03:46:32 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x8}, 0x20) 03:46:33 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff2", 0x41}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@flushpolicy={0x10, 0x15, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) 03:46:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 352.357772][T14014] binder: 14011:14014 ioctl c0306201 20000240 returned -14 03:46:33 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000080)={{0x1, 0x0, @identifier="4736c2c62e531e8e87fd0636e47c5a76"}}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:46:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x5c}}, 0x0) 03:46:33 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x8}, 0x20) 03:46:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 352.529929][T14019] BPF:No type found 03:46:33 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000100)) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) dup3(r1, r0, 0x0) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x80000000000000, 0x1, 0x0, r0, 0x0, 0x2}]) pipe2$9p(&(0x7f0000000240), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000140)={0x5000}) fcntl$getown(r4, 0x9) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[], 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x6b}}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) [ 352.769337][T14035] BPF:No type found 03:46:33 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x30a4d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9dd59c17e94186fc, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x88000005, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') [ 352.962016][T14042] binder: 14039:14042 ioctl c0306201 20000240 returned -14 03:46:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:33 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) [ 353.079176][T14050] BPF:[1] INT (anon) [ 353.083390][T14050] BPF:size=5 bits_offset=76 nr_bits=0 encoding=(none) [ 353.090493][T14050] BPF: [ 353.093312][T14050] BPF:nr_bits exceeds type_size [ 353.098512][T14050] BPF: [ 353.098512][T14050] 03:46:33 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket(0x8, 0x5, 0x7) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000004480)={0x1, 0x1}) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:46:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 353.419803][T14065] BPF:[1] INT (anon) [ 353.424071][T14065] BPF:size=5 bits_offset=76 nr_bits=0 encoding=(none) [ 353.431485][T14065] BPF: [ 353.434313][T14065] BPF:nr_bits exceeds type_size [ 353.439301][T14065] BPF: [ 353.439301][T14065] 03:46:34 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff020000000a0001006e6574656d000000190002"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ff63, 0x0) 03:46:34 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) [ 353.529633][T14070] binder: 14067:14070 ioctl c0306201 20000240 returned -14 03:46:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000200000000000000fe8000"/268], 0x154}}, 0x0) 03:46:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, 0x8, 0x6, 0x401}, 0x14}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:34 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 353.839254][T14083] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 353.892346][T14083] selinux_netlink_send: 2 callbacks suppressed [ 353.892395][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 [ 353.894981][T14085] BPF:[1] INT (anon) [ 353.920136][T14085] BPF:size=5 bits_offset=76 nr_bits=0 encoding=(none) [ 353.927081][T14085] BPF: [ 353.929991][T14085] BPF:nr_bits exceeds type_size [ 353.934995][T14085] BPF: [ 353.934995][T14085] [ 353.935033][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 [ 353.952868][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 [ 353.965877][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 03:46:34 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='S'], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 354.058946][T14090] binder: 14088:14090 ioctl c0306201 20000240 returned -14 [ 354.066465][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 [ 354.079591][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 [ 354.198461][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 03:46:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 354.304223][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 03:46:35 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) 03:46:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, 0x8, 0x6, 0x401}, 0x14}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 354.395724][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 [ 354.408282][T14106] IPVS: ftp: loaded support on port[0] = 21 03:46:35 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x4, 0x0, 0x2e}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)={0x1008, 0x9, "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"}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) [ 354.495125][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz-executor.5 [ 354.584219][T14108] binder: 14107:14108 ioctl c0306201 20000240 returned -14 [ 354.613070][T14112] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 354.674549][T14119] BPF:[1] INT (anon) [ 354.680686][T14119] BPF:size=5 bits_offset=0 nr_bits=68 encoding=(none) [ 354.687947][T14119] BPF: [ 354.690773][T14119] BPF:nr_bits exceeds type_size [ 354.695808][T14119] BPF: [ 354.695808][T14119] 03:46:35 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) [ 354.899850][ T32] kauditd_printk_skb: 23 callbacks suppressed [ 354.899902][ T32] audit: type=1804 audit(1586576795.570:448): pid=14142 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/153/bus" dev="sda1" ino=15950 res=1 03:46:35 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101}, 0x14}}, 0x0) [ 355.018701][T14148] IPVS: ftp: loaded support on port[0] = 21 [ 355.026772][T14152] BPF:[1] INT (anon) [ 355.031077][T14152] BPF:size=5 bits_offset=0 nr_bits=68 encoding=(none) [ 355.038462][T14152] BPF: [ 355.041287][T14152] BPF:nr_bits exceeds type_size [ 355.046464][T14152] BPF: [ 355.046464][T14152] [ 355.089129][ T32] audit: type=1804 audit(1586576795.760:449): pid=14155 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/153/bus" dev="sda1" ino=15950 res=1 [ 355.115621][ T32] audit: type=1804 audit(1586576795.760:450): pid=14134 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/153/bus" dev="sda1" ino=15950 res=1 03:46:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, 0x8, 0x6, 0x401}, 0x14}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:35 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) [ 355.335132][T14175] binder: 14174:14175 ioctl c0306201 20000240 returned -14 03:46:36 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c3000, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 355.483443][ T32] audit: type=1804 audit(1586576795.810:451): pid=14155 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/153/bus" dev="sda1" ino=15950 res=1 [ 355.509002][ T32] audit: type=1804 audit(1586576795.870:452): pid=14134 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/153/bus" dev="sda1" ino=15950 res=1 [ 355.514307][T14194] BPF:[1] INT (anon) [ 355.539687][T14194] BPF:size=5 bits_offset=0 nr_bits=68 encoding=(none) [ 355.546710][T14194] BPF: [ 355.549647][T14194] BPF:nr_bits exceeds type_size [ 355.558434][T14194] BPF: [ 355.558434][T14194] 03:46:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:36 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, 0x0, 0x2a, 0x0, 0x8}, 0x20) [ 355.873841][ T32] audit: type=1804 audit(1586576796.380:453): pid=14200 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/154/bus" dev="sda1" ino=16081 res=1 [ 355.903423][ T32] audit: type=1804 audit(1586576796.500:454): pid=14203 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/154/bus" dev="sda1" ino=16081 res=1 [ 355.912454][T14205] binder: 14204:14205 ioctl c0306201 20000240 returned -14 [ 355.928791][ T32] audit: type=1804 audit(1586576796.510:455): pid=14200 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/154/bus" dev="sda1" ino=16081 res=1 [ 355.961734][ T32] audit: type=1804 audit(1586576796.510:456): pid=14203 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/154/bus" dev="sda1" ino=16081 res=1 03:46:36 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x30, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./bus\x00', 0x9, 0x8, &(0x7f0000000640)=[{&(0x7f0000000100), 0x0, 0x1}, {&(0x7f0000000140)="4d25c97ea0d74b072f5768e22daa723fabb7df612152b79a7248e0e93180cd76e68c718d1be7c6d89d7de44823a35439924ceb7a56fd976d8bbee97a52c33feef21ad1def8c19f06313ae8f80549ed7153762ffb8b6468001b18f1587d3868e01afd40c112f55b19088726e3b3162a7df6cd5b01861a1cd5e79fdd8a3b6eb20754e1b48820e54adea10d5f62af1b60ba7dbb173967d357ba93142e023ac75d6022cd447bb1616609adb07ed60e9da19726cfd02b7e055106c10602d72d26719df42e4a56509fb302c98469374c858af2ef4f1d9e2b02953e6d6f1f4bbe331bc3246bb51e82e32a4caee3af02b5131904e14458", 0xf3, 0x9}, {&(0x7f0000000240)="26b7fa265264cf6fd1c7953bf803c90a1f042b8787cd22079992bb2eacb5d082add62135e57c7aab2d986e671e31554fc68b9cc4a29c74fc1cac10fd9020008c52630269e6cfd9ccb10c31834eb2744180859a063d1a0e924982089e70940a98e95780797e6007905ae0dbbae74e7c5b68fb29d25e117d680a0564b8", 0x7c, 0x10000}, {&(0x7f00000002c0)="5c7ce4db41753234d827ea301fa143801ae327548461f2e5b07acff673ae", 0x1e, 0x1}, {&(0x7f0000000300)="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", 0xfa, 0x1}, {&(0x7f0000000400)="00f816ea63c8fbbd9b5540d44622335f4ba191bf4dc6b63d552fa06ff6d05f1b5b03405526da3952a7676721352c361cf0064e5dc0224faffab4001178f48e690a945741f9a4", 0x46}, {&(0x7f0000000480)="4923a694cb426961ad23f7ebd4ee315d4a5a2caec046dcec2cecdfeefbd9955eb16ea583cef640f3085150f51f425b21937d6a1672dbe9df82b5f5055422d8158c242cf2fdc53ee71698a33470255009a97dfe673f7606fe7c069f1916af01dfacaaf5629f2f631ea6df119c912ba0a6eb2829a9fa50d5337261f31c92d969cc18070976229a489c", 0x88, 0xf2d0}, {&(0x7f0000000540)="aaa95de7e05e1f93bd41ba9a06237d4b91ddbfc3fa8bda259b7c5b7490b58dbf15011896ff8921fa40047d370debb79503afd4bb48743cfc5cd02e27feed469a1dec2849ef889c67ac0979fb3518cf4a7ff05376dbc17004e34cfc77a26951c92e388ee0c3932f14972865fd56814eba0e27376d52c5009513643169ec29c0ca0301034857af3495aefa2114314782282ca4468259d59d40ba19acda6990172d881ce23788a0b58114618dc61ad749b10458a4d4c12141844cd57598a4018ddb415824ac05", 0xc5, 0x5}], 0xc0040, &(0x7f00000006c0)={[{@subvol={'subvol'}}, {@noautodefrag='noautodefrag'}, {@barrier='barrier'}, {@space_cache='space_cache'}, {@noautodefrag='noautodefrag'}, {@fragment_metadata='fragment=metadata'}, {@acl='acl'}, {@device={'device', 0x3d, './bus'}}, {@nospace_cache='nospace_cache'}], [{@subj_role={'subj_role', 0x3d, 'systemcpuset\''}}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:36 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, 0x0, 0x2a, 0x0, 0x8}, 0x20) 03:46:37 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x6628, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) 03:46:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 356.580476][ T32] audit: type=1804 audit(1586576796.720:457): pid=14200 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/154/bus" dev="sda1" ino=16081 res=1 [ 356.583297][T14234] binder_alloc: 14229: binder_alloc_buf, no vma [ 356.612378][T14234] binder: 14229:14234 ioctl c0306201 20000240 returned -14 03:46:37 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, 0x0, 0x2a, 0x0, 0x8}, 0x20) 03:46:37 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x170c0000) 03:46:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:37 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e}, 0x20) 03:46:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:38 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg1\x00'}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaac46, &(0x7f0000000040)=[{&(0x7f0000000100)="906ded9c567a14606b6673176661740008040980", 0x14, 0x2}], 0x0, 0x0) 03:46:38 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e}, 0x20) [ 357.420078][T14271] binder_alloc: 14265: binder_alloc_buf, no vma [ 357.428269][T14271] binder: 14265:14271 ioctl c0306201 20000240 returned -14 03:46:38 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:38 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:38 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x44, 0x0, 0x4c}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e}, 0x20) 03:46:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="cd91d0e1ab1586f9acd5bf75604c365727d182ee7c379434021265928f80ae591743959dcd4cbb446d0a8aa892a0d342c1ce953301d1c9cfa2bc719882f4bdfccc3c27362a2c4891c763a2761445cf53200b8b0d614c3220f671dd52fb8a1ce0b7c4acf6301db73bee08a79ee1f4a9615c8fda5e6ee254d11556a44a03978fdd5c221014ca542c88bcaaaacd5acf4a8ebc0c7f31f7595e2e4e3a64e96e3b93c6d4"], 0x24}}, 0x0) [ 358.033203][T14297] binder_alloc: 14293: binder_alloc_buf, no vma [ 358.041009][T14297] binder: 14293:14297 ioctl c0306201 20000240 returned -14 03:46:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:39 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) openat$selinux_attr(0xffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:46:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) perf_event_open(0x0, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:46:39 executing program 2: r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) tee(0xffffffffffffffff, r0, 0x56, 0x0) mremap(&(0x7f00005db000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00006fa000/0x3000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000280)="f30f0866b8f5ffffff0f23c80f21f866350c00a0000f23f80f32f2a714f001fc29fc2938298a0d000f01df0f73f38a0f8fc579790000", 0x36}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0xe0003}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x75c1, 0x2) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000440)=""/229) [ 358.802816][T14331] binder: 14327:14331 ioctl c0306201 20000240 returned -14 03:46:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socket$inet_udplite(0x2, 0x2, 0x88) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 359.056150][T14335] kvm [14332]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 03:46:39 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) [ 359.134501][T14335] kvm [14332]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 359.230104][T14335] kvm [14332]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 03:46:40 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000040)) [ 359.328279][T14335] kvm [14332]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 359.337689][T14358] binder: 14347:14358 ioctl c0306201 20000240 returned -14 [ 359.423159][T14335] kvm [14332]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 03:46:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 359.514735][T14335] kvm [14332]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 359.592834][T14335] kvm [14332]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 359.669375][T14335] kvm [14332]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 359.814132][T14377] binder: 14373:14377 ioctl c0306201 20000240 returned -14 [ 359.977589][ T32] kauditd_printk_skb: 21 callbacks suppressed [ 359.977653][ T32] audit: type=1804 audit(1586576800.650:479): pid=14387 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/159/bus" dev="sda1" ino=16558 res=1 [ 360.008958][ T32] audit: type=1804 audit(1586576800.650:480): pid=14375 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/159/bus" dev="sda1" ino=16558 res=1 [ 360.034967][ T32] audit: type=1804 audit(1586576800.680:481): pid=14375 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/159/bus" dev="sda1" ino=16558 res=1 [ 360.059727][ T32] audit: type=1804 audit(1586576800.680:482): pid=14387 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/159/bus" dev="sda1" ino=16558 res=1 [ 360.085006][ T32] audit: type=1804 audit(1586576800.730:483): pid=14387 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/159/bus" dev="sda1" ino=16558 res=1 03:46:40 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30]}}]}) [ 360.109670][ T32] audit: type=1804 audit(1586576800.730:484): pid=14375 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/159/bus" dev="sda1" ino=16558 res=1 03:46:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:40 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:41 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:41 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$nullb(0xffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x200501, 0x0) fcntl$getflags(r3, 0x408) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 360.635157][T14398] devtmpfs: Cannot retroactively limit size 03:46:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 360.857084][T14417] devtmpfs: Cannot retroactively limit size 03:46:41 executing program 2: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x40000, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) dup(0xffffffffffffffff) gettid() process_vm_writev(0x0, &(0x7f00000015c0)=[{0x0}, {0x0}], 0x2, &(0x7f00000016c0), 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 03:46:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 361.020133][ T32] audit: type=1804 audit(1586576801.690:485): pid=14423 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/160/bus" dev="sda1" ino=16568 res=1 03:46:41 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) [ 361.191351][ T32] audit: type=1804 audit(1586576801.820:486): pid=14428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/160/bus" dev="sda1" ino=16568 res=1 03:46:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 361.216664][ T32] audit: type=1804 audit(1586576801.830:487): pid=14423 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/160/bus" dev="sda1" ino=16568 res=1 [ 361.242557][ T32] audit: type=1804 audit(1586576801.830:488): pid=14428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/160/bus" dev="sda1" ino=16568 res=1 03:46:42 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x301501, 0x27) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 361.469419][T14437] binder: BINDER_SET_CONTEXT_MGR already set [ 361.475939][T14437] binder: 14435:14437 ioctl 40046207 0 returned -16 03:46:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 361.805615][T14449] binder: 14446:14449 ioctl c0306201 20000240 returned -14 03:46:42 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000000, 0x20010, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 03:46:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:42 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/41, 0x29) [ 362.137160][T14464] binder: 14458:14464 ioctl c0306201 20000240 returned -14 [ 362.151285][T14461] devtmpfs: Cannot retroactively limit size 03:46:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:43 executing program 2: 03:46:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:43 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) [ 362.688872][T14486] binder: 14484:14486 ioctl c0306201 20000240 returned -14 03:46:43 executing program 2: [ 362.881186][T14492] devtmpfs: Cannot retroactively limit size 03:46:43 executing program 1: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace(0x4208, r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ftruncate(r1, 0x7ff) r2 = openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4141c0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000140)={0x20, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x5, 0x3], &(0x7f0000000100)}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="d45f"], 0x1) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x20, 0x0, 0x2009, 0x0, 0x6, 0x1, 0x1, 0x5}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f00000002c0)={0x1, 0x0, {0x56be, 0x8000, 0x6, 0x3ff}}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) 03:46:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:43 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:43 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:44 executing program 2: 03:46:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 363.570983][T14516] devtmpfs: Cannot retroactively limit size 03:46:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:44 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:44 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='sessionid\x00') mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000080)=r3) ioctl$int_out(r3, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:44 executing program 2: 03:46:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:44 executing program 2: 03:46:44 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r1) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000040)="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") r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:46:45 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:45 executing program 2: 03:46:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:45 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 365.051491][ T32] kauditd_printk_skb: 19 callbacks suppressed [ 365.051552][ T32] audit: type=1804 audit(1586576805.720:508): pid=14577 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/165/bus" dev="sda1" ino=16591 res=1 03:46:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) [ 365.183503][T14583] binder: 14579:14583 ioctl c0306201 20000240 returned -14 03:46:45 executing program 2: 03:46:46 executing program 4: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 365.514635][ T32] audit: type=1804 audit(1586576806.180:509): pid=14597 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/166/bus" dev="sda1" ino=16607 res=1 [ 365.664188][ T32] audit: type=1804 audit(1586576806.290:510): pid=14603 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/166/bus" dev="sda1" ino=16607 res=1 [ 365.690521][ T32] audit: type=1804 audit(1586576806.310:511): pid=14597 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/166/bus" dev="sda1" ino=16607 res=1 [ 365.715253][ T32] audit: type=1804 audit(1586576806.310:512): pid=14603 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/166/bus" dev="sda1" ino=16607 res=1 03:46:46 executing program 2: [ 365.794777][T14606] binder: 14599:14606 ioctl c0306201 20000240 returned -14 03:46:46 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:46 executing program 4: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:46 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, [], 0x1, 0x8}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:46:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 366.244867][ T32] audit: type=1804 audit(1586576806.490:513): pid=14597 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/166/bus" dev="sda1" ino=16607 res=1 03:46:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:47 executing program 2: [ 366.446196][T14631] binder: 14627:14631 ioctl c0306201 20000240 returned -14 [ 366.561274][ T32] audit: type=1804 audit(1586576807.230:514): pid=14632 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/167/bus" dev="sda1" ino=16608 res=1 03:46:47 executing program 4: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:47 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 366.719726][ T32] audit: type=1804 audit(1586576807.330:515): pid=14636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/167/bus" dev="sda1" ino=16608 res=1 [ 366.752085][ T32] audit: type=1804 audit(1586576807.340:516): pid=14632 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/167/bus" dev="sda1" ino=16608 res=1 [ 366.776696][ T32] audit: type=1804 audit(1586576807.340:517): pid=14636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/167/bus" dev="sda1" ino=16608 res=1 03:46:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:47 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000100)={0x1f, 0xffffffff, 0x9, 0x3, 0x1000, 0x6, 0x2, 0xfffffffe, 0x1, 0x7, 0x3, 0x10001, 0x7, 0x4, &(0x7f0000000040)=""/161, 0x4, 0x4, 0x5}) 03:46:48 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:48 executing program 2: 03:46:48 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:48 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:48 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)={0x20, 0x8, 0x6, 0x401, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0xffffffffffffff7e, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8944}, 0x0) r4 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x40050) r5 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) ioctl$int_out(r3, 0x2, &(0x7f00000000c0)) getsockname$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) 03:46:48 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:48 executing program 2: 03:46:48 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 368.407381][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:49 executing program 2: [ 368.544739][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:49 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:49 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:49 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:49 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000080)=r3) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x3000007, 0x2812, r3, 0x90072000) 03:46:49 executing program 2: 03:46:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:49 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:49 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:50 executing program 2: 03:46:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000140)={0x29, 0x4, 0x0, {0x6, 0x6, 0x1, 0x0, [0x0]}}, 0x29) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xa27, &(0x7f0000000040)="37161e22374c3716e9411026a35827a6c2ca3b1c700febea59706248da4ed65774fa4a450d2fc5ce3297af2be02118a94f76", &(0x7f0000000080)="9062f0f8426fff33f52a959d8f92c1299bcb4b629ef22fb367cfd0dd81a03bed8b36dc2a6e47c4705aa0da13b5cfb9166986e18c0db35bfe650eb1c663b8d8d780699abe36c1db9c254f8511ee3d3316363db05506715c", 0x32, 0x57}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) 03:46:50 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:50 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:50 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:50 executing program 2: 03:46:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 370.106877][ T32] kauditd_printk_skb: 17 callbacks suppressed [ 370.106938][ T32] audit: type=1804 audit(1586576810.780:535): pid=14755 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/171/bus" dev="sda1" ino=16630 res=1 [ 370.138474][ T32] audit: type=1804 audit(1586576810.780:536): pid=14755 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/171/bus" dev="sda1" ino=16630 res=1 [ 370.163137][ T32] audit: type=1804 audit(1586576810.780:537): pid=14755 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/171/bus" dev="sda1" ino=16630 res=1 03:46:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:51 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:51 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab3}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14c, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2b9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:51 executing program 2: [ 370.484031][T14775] binder: 14773:14775 ioctl c0306201 20000240 returned -14 [ 370.571888][ T32] audit: type=1804 audit(1586576810.860:538): pid=14767 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/171/bus" dev="sda1" ino=16630 res=1 03:46:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 370.796620][ T32] audit: type=1804 audit(1586576811.470:539): pid=14790 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/172/bus" dev="sda1" ino=16645 res=1 03:46:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:51 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) [ 370.987537][T14790] tipc: Enabling of bearer rejected, failed to enable media [ 371.019019][ T32] audit: type=1804 audit(1586576811.650:540): pid=14798 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/172/bus" dev="sda1" ino=16645 res=1 03:46:51 executing program 2: [ 371.097089][T14800] binder: 14796:14800 ioctl c0306201 20000240 returned -14 [ 371.191051][T14798] tipc: Enabling of bearer rejected, failed to enable media [ 371.220702][ T32] audit: type=1804 audit(1586576811.720:541): pid=14790 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/172/bus" dev="sda1" ino=16645 res=1 [ 371.245279][ T32] audit: type=1804 audit(1586576811.730:542): pid=14798 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/172/bus" dev="sda1" ino=16645 res=1 [ 371.270296][ T32] audit: type=1804 audit(1586576811.860:543): pid=14790 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/172/bus" dev="sda1" ino=16645 res=1 03:46:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:52 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:52 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0xffffff65, 0x3018}) r2 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c000000080620910000000000000000000000000d00010007000000"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x15, 0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) fcntl$getflags(r1, 0x3) [ 371.592570][T14818] binder: 14815:14818 ioctl c0306201 20000240 returned -14 03:46:52 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:52 executing program 2: 03:46:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 371.912737][ T32] audit: type=1804 audit(1586576812.580:544): pid=14824 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/173/bus" dev="sda1" ino=16648 res=1 03:46:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 372.173505][T14841] binder: 14840:14841 ioctl c0306201 20000240 returned -14 03:46:52 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:53 executing program 2: 03:46:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:53 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000180)={0x7, 'veth1_to_team\x00', {0x5}, 0x6}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8d3df452e8ccbca4c56ab247e5"], 0x1) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/158, &(0x7f0000000100)=0x9e) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 03:46:53 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:53 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:53 executing program 2: [ 372.883703][T14863] binder: 14861:14863 ioctl c0306201 20000240 returned -14 03:46:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:53 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:54 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:54 executing program 2: 03:46:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:54 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e5"], 0x1) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000080)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x200040, 0x23) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 373.552185][T14891] binder: 14889:14891 ioctl c0306201 20000240 returned -14 03:46:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:54 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:54 executing program 2: [ 374.049108][T14911] binder: 14910:14911 ioctl c0306201 0 returned -14 03:46:54 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) [ 374.127439][T14918] binder: 14910:14918 ioctl c0306201 20000240 returned -14 03:46:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:55 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 03:46:55 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:55 executing program 2: [ 374.689356][T14938] binder: 14934:14938 ioctl c0306201 0 returned -14 [ 374.728778][T14938] binder: 14934:14938 ioctl c0306201 20000240 returned -14 03:46:55 executing program 5: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) 03:46:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:55 executing program 2: 03:46:55 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:55 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 375.391212][T14969] binder: 14963:14969 ioctl c0306201 0 returned -14 03:46:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, 0x0, 0x2}], 0x0, 0x1000000, 0x0}) [ 375.441722][T14969] binder: 14963:14969 ioctl c0306201 20000240 returned -14 03:46:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:56 executing program 5: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) 03:46:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 375.719643][ T32] kauditd_printk_skb: 18 callbacks suppressed [ 375.719706][ T32] audit: type=1804 audit(1586576816.390:563): pid=14978 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/177/bus" dev="sda1" ino=16668 res=1 03:46:56 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r0, 0x0, 0x18) [ 376.038340][ T32] audit: type=1804 audit(1586576816.430:564): pid=14978 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/177/bus" dev="sda1" ino=16668 res=1 [ 376.040056][T14994] binder: 14993:14994 ioctl c0306201 20000240 returned -14 03:46:56 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 03:46:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 376.062927][ T32] audit: type=1804 audit(1586576816.430:565): pid=14980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/177/bus" dev="sda1" ino=16668 res=1 03:46:57 executing program 5: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) [ 376.454101][ T32] audit: type=1804 audit(1586576816.950:566): pid=15002 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/178/bus" dev="sda1" ino=16688 res=1 [ 376.479165][ T32] audit: type=1804 audit(1586576817.030:567): pid=15007 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/178/bus" dev="sda1" ino=16688 res=1 [ 376.505529][ T32] audit: type=1804 audit(1586576817.040:568): pid=15002 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/178/bus" dev="sda1" ino=16688 res=1 [ 376.530014][ T32] audit: type=1804 audit(1586576817.040:569): pid=15007 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/178/bus" dev="sda1" ino=16688 res=1 03:46:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x400c630e}, @acquire={0x40046305, 0x400c630e}], 0x0, 0x1000000, 0x0}) [ 376.554891][ T32] audit: type=1804 audit(1586576817.180:570): pid=15002 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/178/bus" dev="sda1" ino=16688 res=1 03:46:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:57 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x8202, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000001c0)={0x100000, 0x0, 0x6, 0x94, 0x35}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r2 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x301000, 0x0) connect(r2, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x80) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x51, 0x76}, 0x2) times(&(0x7f0000000040)) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 03:46:57 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, 0x0) 03:46:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ppoll(&(0x7f0000000080)=[{r0}, {r5, 0x141}], 0x2, 0x0, 0x0, 0x0) [ 377.117076][T15035] binder: 15033:15035 ioctl c0306201 20000240 returned -14 03:46:57 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 377.411493][T15053] binder: 15051:15053 ioctl c0306201 0 returned -14 03:46:58 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, 0x0) 03:46:58 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0x802b}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 377.638292][T15062] binder: 15059:15062 ioctl c0306201 20000240 returned -14 03:46:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') lseek(r0, 0x2, 0x1) [ 377.664997][ T32] audit: type=1804 audit(1586576817.900:571): pid=15043 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/179/bus" dev="sda1" ino=16692 res=1 [ 377.690212][ T32] audit: type=1804 audit(1586576817.980:572): pid=15049 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/179/bus" dev="sda1" ino=16692 res=1 03:46:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:58 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:46:58 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, 0x0) 03:46:58 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000040)=""/193) [ 378.224404][T15085] binder: 15083:15085 ioctl c0306201 20000240 returned -14 03:46:59 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000080)=r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='fuseblk\x00', 0x2200040, &(0x7f00000001c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other='allow_other'}], [{@context={'context', 0x3d, 'user_u'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x64, 0x37, 0x36, 0x34, 0x34, 0x31, 0x21], 0x2d, [0x32, 0x30, 0x30, 0x62], 0x2d, [0x37, 0x64, 0x31, 0x33], 0x2d, [0x64, 0x39, 0x66, 0x39], 0x2d, [0x31, 0x62, 0x65, 0x31, 0x64, 0x36, 0x36, 0x37]}}}]}}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) 03:46:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:59 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:59 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)) 03:46:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000003540)={0x10, 0x3fa}, 0x10}}, 0x0) 03:46:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 378.821729][T15110] binder: 15108:15110 ioctl c0306201 20000240 returned -14 03:46:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:46:59 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:46:59 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)) 03:47:00 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 379.404542][T15138] binder: 15135:15138 ioctl c0306201 20000240 returned -14 03:47:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x40, 0x5844, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 03:47:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:00 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:47:00 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)) 03:47:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) [ 379.982365][T15160] binder: 15154:15160 ioctl c0306201 20000240 returned -14 03:47:00 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="00b6da6e4ab1a16a5b112c5938d68086f0d011a6292195842d9089674dd3e7774d90f49fefcfaf6a1ff8fa873957cf85d464de483dcce3b862b57355232c0b0606d713c89e56642ca2173793bef3da0505bb3d21d331e143b430fc3b9838177a0123ad77179b1679935855daa7b8beb9389c5b20e4684388bdf4d8c3919bdf20b67b7fe3681b5cdff0ccf4c520d2a96eae32e205a21390cdf4e95758a2846420bdde9e21b2a47e8aecc0f5") mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x0, 0x6}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x524}, &(0x7f0000000140)=0x8) 03:47:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:01 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:47:01 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks'}}]}) 03:47:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x4) [ 380.670048][T15192] binder: 15184:15192 ioctl c0306201 20000240 returned -14 03:47:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:01 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) [ 380.942152][T15204] devtmpfs: Bad value for 'nr_blocks' 03:47:01 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x9) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000080)=r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000004, 0x810, r1, 0xf07ad000) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) r6 = getgid() lstat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='fuseblk\x00', 0x2000000, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',rootode=00000000000000000120000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id\t', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000400,allow_other,measure,hash,fscontext=unconfined_u,euid=', @ANYRESDEC=r7, @ANYBLOB=',defcontext=unconfined_u,\x00']) clone(0x0, 0x0, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r8, 0x0) 03:47:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:01 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks'}}]}) 03:47:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000003540)={0x10, 0x3f6}, 0x10}}, 0x0) [ 381.259334][T15216] binder: 15213:15216 ioctl c0306201 20000240 returned -14 03:47:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 381.382046][ T32] kauditd_printk_skb: 21 callbacks suppressed [ 381.382168][ T32] audit: type=1804 audit(1586576822.050:594): pid=15219 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/184/bus" dev="sda1" ino=16728 res=1 [ 381.549844][T15233] fuseblk: Bad value for 'fd' [ 381.571124][T15230] devtmpfs: Bad value for 'nr_blocks' [ 381.595906][ T32] audit: type=1804 audit(1586576822.190:595): pid=15233 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/184/bus" dev="sda1" ino=16728 res=1 03:47:02 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2440, 0x53) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'xfrm0\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x90) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) [ 381.621108][ T32] audit: type=1804 audit(1586576822.200:596): pid=15233 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/184/bus" dev="sda1" ino=16728 res=1 [ 381.646347][ T32] audit: type=1804 audit(1586576822.300:597): pid=15233 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/184/bus" dev="sda1" ino=16728 res=1 03:47:02 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks'}}]}) 03:47:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 381.849314][T15242] binder: 15241:15242 unknown command 25349 [ 381.858498][T15242] binder: 15241:15242 ioctl c0306201 20000200 returned -22 03:47:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x40, 0x5844, 0x1}, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) [ 381.924444][T15243] binder: 15241:15243 ioctl c0306201 20000240 returned -14 03:47:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:02 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) [ 382.845419][T15256] binder: 15252:15256 unknown command 25349 [ 382.851540][T15256] binder: 15252:15256 ioctl c0306201 20000200 returned -22 [ 382.930041][T15261] binder: 15252:15261 ioctl c0306201 20000240 returned -14 [ 382.995675][T15258] devtmpfs: Bad value for 'nr_blocks' [ 383.011176][ T32] audit: type=1804 audit(1586576823.680:598): pid=15269 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/185/bus" dev="sda1" ino=16756 res=1 03:47:03 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}]}) [ 383.315293][ T32] audit: type=1804 audit(1586576823.880:599): pid=15265 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/185/bus" dev="sda1" ino=16756 res=1 [ 383.340423][ T32] audit: type=1804 audit(1586576823.960:600): pid=15265 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/185/bus" dev="sda1" ino=16756 res=1 03:47:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 383.365107][ T32] audit: type=1804 audit(1586576823.960:601): pid=15269 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/185/bus" dev="sda1" ino=16756 res=1 03:47:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') lseek(r2, 0x8, 0x0) read$char_usb(r2, &(0x7f0000000680)=""/226, 0xe2) 03:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 383.579406][T15282] binder: 15281:15282 unknown command 25349 [ 383.585653][T15282] binder: 15281:15282 ioctl c0306201 20000200 returned -22 03:47:04 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x52803, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'veth0_to_batadv\x00'}}) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x30, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffffffffff81, 0x8182, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x85a3, 0x0, @perf_config_ext={0x6, 0x400}, 0x88, 0x8, 0x6, 0x2, 0x20200000000, 0x8}, r3, 0xb, 0xffffffffffffffff, 0x2) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) fcntl$setstatus(r2, 0x4, 0x80000) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@default, @null, @default, @default, @rose, @rose, @bcast, @bcast]}, &(0x7f0000000200)=0x48, 0x0) sendmsg$sock(r5, &(0x7f0000000700)={&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @mcast2, 0x4}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="a36a69c7cbdddeaa69fbd4f441e6d2170dfe33a719ef6312880768f99f5b5d8b83a4e0d68cdfaf96114fbc868c55c7cd9075d557e24f8d630c739e84caea665b1e05d3b4295f017c8456ec064e6bfe8d92d73681959ea62ca0a0ba8126a4c61f1077c4c87f", 0x65}, {&(0x7f0000000380)="43d3ba2e251203a2d57d9e7826021345a6142f7214e39eb21fb197068274b996acb4a6c2c2d86d60accaaf867640ccd31613745b24e6b83cd6cadab96f9df5d0856744224ceb3799c3a173156829dc20a85955f9b2623b81a69ecc8917b41f090c8de0bab8f8608a59a87e98e0d37cae66f93704b268482fab604ba0d85610bab0e2ddc275747ed1708308e827a69fc17a1f9927541ea9d18853f038681c97c37a347e99a16ec8c2e5aae516ee7579ebe26df3a913e79272749a9caed77e19279b4798bff80863177ed70b57a1ce6fbac11c4a", 0xd3}, {&(0x7f0000000480)="053deafdca3e4edb3a610b759dd4286480b4a9fe529363ea01bdd6b743b8f3d197c91f0e55617a6288d5d28f5ce71bced113f73045e2e025218042055f9578fc813147d3b7a821b7cce4552456bdfb2581bff2e6945bb7dbbb9f31311e66a0b6a47e4452b34aa843d86158c7d1191f86467584fc8f0b1c85be0f523b77f513ee9a4bae2c368ef4c2b7bea0a73bde07d88cfef5771d475715b99bc7294ed0ca7ab9514d543b1ea9243b59f22b04c9fefe6889380d823b3c2c2be344f23a9781a63e35a1f790d45c3ec2e2265ed128fd2865938bc031b570751c5933df8a9f", 0xde}, {&(0x7f0000000580)="29d305f9e00084bc9a58d7e3f60ff8b3e8b5248c01ddf6b07ebf856916f4", 0x1e}, {&(0x7f00000005c0)="a7a7dbdcb508780ae1ed25bcee60dd732130ebbb274c8d196daded1252c0ca231f13c61d7142946bb8abab859fc5e8a5c853b66e50dd7410dd3a88fb43795a55b8d807d1c290bb32cffe8bebeb3fc912a61c2b99f7af1bd858f3a820a761819fc4c59abdbab85740f51e376dd29e4337567ad349e94e7079011248f7bde5a656ec49c40e5a755802e20c699c08169070c84da45c9008075dd3cf1a4fc2a58bacb08c7da0bb10ac654f6eec10a837db661cfcdb", 0xb3}, {&(0x7f0000001700)="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", 0x1000}], 0x7, &(0x7f00000006c0)=[@timestamping={{0x10, 0x1, 0x25, 0x2}}], 0x10}, 0x4048000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x300000c, 0x40010, r4, 0x0) r6 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f00000000c0)) [ 383.635766][T15285] binder: 15281:15285 ioctl c0306201 20000240 returned -14 03:47:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 383.733633][T15286] devtmpfs: Bad value for 'nr_blocks' 03:47:04 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:47:04 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}]}) [ 383.926092][ T32] audit: type=1804 audit(1586576824.130:602): pid=15265 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/185/bus" dev="sda1" ino=16756 res=1 03:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000003540)={0x10, 0x3f8}, 0x10}}, 0x0) [ 384.243707][T15309] binder: 15303:15309 unknown command 287493 [ 384.250061][T15309] binder: 15303:15309 ioctl c0306201 20000200 returned -22 [ 384.307581][T15313] binder: 15303:15313 ioctl c0306201 20000240 returned -14 [ 384.318689][T15311] devtmpfs: Bad value for 'nr_blocks' 03:47:05 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2b6007e, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}]}) 03:47:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:05 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r2) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4, 0x810, r2, 0xffffe000) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000004, 0x2812, r3, 0x4000) 03:47:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:47:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 384.965922][T15334] devtmpfs: Bad value for 'nr_blocks' [ 385.041853][T15340] binder: 15335:15340 unknown command 287493 [ 385.048190][T15340] binder: 15335:15340 ioctl c0306201 20000200 returned -22 [ 385.080751][ T32] audit: type=1804 audit(1586576825.750:603): pid=15341 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/187/bus" dev="sda1" ino=15989 res=1 [ 385.129443][T15343] binder: 15335:15343 ioctl c0306201 20000240 returned -14 03:47:05 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:47:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:06 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0xffffa000) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)={0x29, 0x3, 0x0, {0x6, 0x8, 0x0, 'eth0ppp1'}}, 0x29) 03:47:06 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x86fffffc) 03:47:06 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x83000000) [ 385.672128][T15364] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 385.719867][T15366] binder: 15361:15366 unknown command 287493 [ 385.726404][T15366] binder: 15361:15366 ioctl c0306201 20000200 returned -22 [ 385.762190][T15364] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 385.780709][T15370] binder: 15361:15370 ioctl c0306201 20000240 returned -14 03:47:06 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x86fffffc) 03:47:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:06 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$vhci(0xffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x40000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2812, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x200040, 0x0) tee(r3, r3, 0xfffffffd, 0x2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) 03:47:06 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x83000000) [ 386.305168][T15384] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 03:47:07 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:47:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:07 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x86fffffc) [ 386.584569][ T32] kauditd_printk_skb: 11 callbacks suppressed [ 386.584630][ T32] audit: type=1804 audit(1586576827.250:615): pid=15395 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/189/bus" dev="sda1" ino=15725 res=1 03:47:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:07 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x83000000) [ 386.774552][ T32] audit: type=1804 audit(1586576827.380:616): pid=15397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/189/bus" dev="sda1" ino=15725 res=1 [ 386.799126][ T32] audit: type=1804 audit(1586576827.440:617): pid=15395 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir204876843/syzkaller.OxqZTk/189/bus" dev="sda1" ino=15725 res=1 03:47:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x400c630f}, @acquire={0x40046305, 0x40046306}], 0x0, 0x1000000, 0x0}) [ 386.991475][T15410] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 03:47:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:08 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x86fffffc) 03:47:08 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x83000000) 03:47:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x12e3183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'ip6erspan0\x00'}) [ 387.568049][T15428] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 03:47:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:08 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:47:08 executing program 2: futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x83000000) 03:47:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:08 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x86fffffc) 03:47:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:09 executing program 2: futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x83000000) 03:47:09 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:47:09 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x86fffffc) 03:47:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000100)=[@dead_binder_done, @acquire], 0x0, 0x1000000, 0x0}) 03:47:09 executing program 2: futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x83000000) 03:47:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:09 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x86fffffc) 03:47:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:10 executing program 2: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x83000000) [ 389.610553][T15505] binder_alloc: 15504: binder_alloc_buf, no vma [ 389.617587][T15505] binder: 15504:15505 ioctl c0306201 20000240 returned -14 03:47:10 executing program 1: mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 03:47:10 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) 03:47:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:10 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) 03:47:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:10 executing program 2: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x83000000) 03:47:10 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) 03:47:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000300)=[@free_buffer, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 03:47:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 390.302337][T15525] binder_alloc: 15523: binder_alloc_buf, no vma [ 390.309282][T15525] binder: 15523:15525 ioctl c0306201 20000240 returned -14 03:47:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:11 executing program 2: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x83000000) [ 390.643880][T15535] binder: 15530:15535 ioctl c0306201 0 returned -14 03:47:11 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) [ 390.746902][T15540] binder: 15530:15540 ioctl c0306201 0 returned -14 03:47:11 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000006000/0x2000)=nil) mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 03:47:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:11 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) [ 391.038150][T15549] binder_alloc: 15545: binder_alloc_buf, no vma [ 391.045494][T15549] binder: 15545:15549 ioctl c0306201 20000240 returned -14 03:47:11 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 03:47:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0x444, &(0x7f0000000080)={0x0, 0x0, 0x3}) close(r2) 03:47:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:12 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) madvise(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x10) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/170) 03:47:12 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 03:47:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 391.632847][T15574] binder: 15565:15574 ioctl c0306201 20000240 returned -14 03:47:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000640)={0x0, 0xfffffffffffffe84, &(0x7f0000000680)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}}, 0x38}}, 0x0) 03:47:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:12 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)) 03:47:12 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) [ 392.117796][T15591] tipc: Started in network mode [ 392.122876][T15591] tipc: Own node identity , cluster identity 4711 [ 392.130174][T15591] tipc: Failed to obtain node identity [ 392.136476][T15591] tipc: Enabling of bearer rejected, failed to enable media [ 392.199638][T15595] binder: 15590:15595 ioctl c0306201 20000240 returned -14 03:47:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:13 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) 03:47:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x400000000}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000a80)=@isdn, 0x80, 0x0}, 0x6}, {{&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/113, 0x71}, 0x9840}, {{&(0x7f0000000c80)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f0000000d00)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/139, 0x8b}, {&(0x7f0000000440)}, {&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000000f80)=""/248, 0xf8}, {&(0x7f00000016c0)=""/232, 0xe8}, {0x0}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/149, 0x95}], 0x9}, 0x6b}, {{&(0x7f0000001240)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/160, 0xa0}, {0x0}, {0x0}, {&(0x7f00000004c0)=""/121, 0x79}], 0x4, &(0x7f00000029c0)=""/234, 0xea}}, {{&(0x7f0000002ac0)=@phonet, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002c80)=""/185, 0xb9}, 0x5}, {{&(0x7f0000002d40)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/151, 0x97}], 0x1, &(0x7f0000002f00)=""/130, 0x82}, 0x9}], 0x6, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000004340)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC], @ANYBLOB="fbffff2bf0ff5400"/18], 0x3}}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r5, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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"/441, 0x1b9}], 0x3) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xfffffef1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) 03:47:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/4096) 03:47:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f0000000440)=[@increfs_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 392.769578][T15613] binder: 15608:15613 ioctl c0306201 20000240 returned -14 03:47:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x12e3183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'ip6erspan0\x00'}) 03:47:13 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,default_permissions']) [ 393.346255][T15638] binder: 15633:15638 ioctl c0306201 20000240 returned -14 03:47:14 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) 03:47:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:14 executing program 4: futex(&(0x7f000000cffc), 0x8b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x2000000) 03:47:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000002880)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000002880)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) [ 393.950855][T15655] binder: 15653:15655 ioctl c0306201 20000240 returned -14 03:47:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:15 executing program 2: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x4000000) 03:47:15 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x80000005) [ 394.487092][T15672] binder: 15671:15672 ioctl c0306201 20000240 returned -14 03:47:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:15 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) [ 394.935851][T15685] selinux_netlink_send: 20 callbacks suppressed [ 394.935901][T15685] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pid=15685 comm=syz-executor.1 03:47:15 executing program 2: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x4000000) [ 395.019412][T15689] binder: 15688:15689 ioctl c0306201 0 returned -14 03:47:15 executing program 4: futex(&(0x7f000000cffc), 0x8b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x2000000) [ 395.079193][T15690] binder: 15688:15690 ioctl c0306201 20000240 returned -14 [ 395.109909][T15691] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pid=15691 comm=syz-executor.1 03:47:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:16 executing program 1: socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) clone(0x12e3183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'ip6erspan0\x00'}) 03:47:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x400000000}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="0000f4d569110000b97f5db202282292956d5c91f0a4acda116895523d7fff057be1651304a2548b60d331b03ac057c6a348d75b415ada9c86130d1f3320e02daa5cf08a9162150151d92902ebe99fe4e32d9f8dad1d10e7eb01122242e8fcf1732be6c72a5622a98409302112d5e51aeee5551cf51279e324a5ce27188ab0c33454a74e2a14561c856b936844481172d9980284f4c14bb4807a48f73f5d5a3ff282d1826b0cb46c11eb6525c4f7d19849b20e6e041f25a2583bf15c7bd68f1400cbad2ddf44db7f8b4e2671195df1d46629a96702a7a03a209817cb16a980adb7f318968637b3ef9eb883e4fc4651fc36214209b7a7784e111a0c54ee8c5ec456ada15e5c1c5b3a5e376a4268c4750d866f81afc5852e9f71cc203d0ce8960bf3c31cb665462ee572605841c97a9ec401eab1c6c620e954a4714c95488daa7b961be94ac896fbb761d051c6cca24bcca025808719c56500e34c5b345beff42401d07d2d53033ea27a4f44e98df195a45fee4d4f38d16a5041b1fc13b4a91ede2609e2977f514d3a8ed55b3fcbf3085dd106c1e9d4e9009be47f6265450d60a5e7381327df45ae9d389e4588b130628484a7299c62ca607f5e55396227d1eb58236a80335cccbaaf4a53a358334cb06bc083568ab0ce67bed703e34d7d828126ea97028f48a3eceda8d15dffaa3287db9e2b75ade308f71b38f912eb8958abdc22c532f463b3914c6ea48503a0cfe5ca282bc11f3d2c28e207791b1d4770d8b515485e75251e59374e6b49c2a667e6fbf9d89e783d79755a1f8e54fbb9703b02b7fddfb7a414dc387c3f3bb123cfb610802431be60aa82d806d27c050a4c10c115b78e085fad5e2904bd98a7b63701a929cd4ad2fcdc7f5d6112e877fb6fada006eb1a2dbde6019abd1b4399318471f153710d5724ab57ee2fa64419b477f365dbfa60db7df5e9a36092d4f32de688c592e207dbd3f89083094062f814a4a49391d3ec2b692f2248755a96383abaceada46d64377800a06e5ce0609b3f23923dab44fe902cd6aa4cff170225a0cd862da013a0eac2d3197f990b2597f6ebe5d58de713062c1dda0f7838f3567d65c9996d42dc5804d08ce453363fb4eb5fb842b2b33c606f71", @ANYPTR=&(0x7f0000004340)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="653650c52f65c85ead26f3b7d7081e285c4aa1aaa6b5db39084ce2245a6a5f2e2f62797da92db2b9c2b4018661bf5e473fedc5ade07768b5b4500d6caf1268af8e42885d564de6c1dd50042cd206899d627ef7830d29f82f24451f5a9a591eec262164affc7578add14e692f915ae5cbf2678acfc56b2d17b0005aeebabcae4e28e34d71dff562fac35054405e512855adb4cc0f1c1b002862b1c3d3309320d409b4c95c5e6410463149b0f8219ebe51dfbf221e1b90db190e46e200a90277bd9afaf5dea47ee03b419357fae076434e798e11dde08680a01f76c25b491a5825006b348ead2f8308da976b8fa6c1de9db65b6a40c46a1ba64c2044abc1aa9a208edf45f295b3bf37fb9eefb0f8e4a6c5ff66667cc8b099eacd31bb1a18b669472fede8d71c87497455dc84813217dd738709e3908633d2a2bbe4b8f5e74df08546d53c7527f037d6ae534f7c4d99bfe9ebaf52de7c7c1f14dc9663b692eadce710883d15b0c77c73d88d5fbf8a5a94877927ae072c374fa2da14895ac3c6ad548b65b9974eae31aac0e19de29a194aa964a032b4c184d4a4ce26a6513161031b8b599c94ba471941ed648bb055a7e5e3a755e448758f966e4e4ff694f80f9f69dea11b37162cc49ca1153f0e8fee99060f44bdb26cb81ac533f94faab6b7bbf5053c2a3de609abb305bf20eb491a57ca1332a73589e5f6d21294f548528a8958e7b6967b3cb6a2d844dac5492910eeba455495dbd1a787d3400d1a9e4a6476abae169d6666ca8498263a71cf6a429606e475402e79a01b1434cc100213da4c4a13366e4f6818bb977e2c818defb1fbd2233207373c8e7122ee6aea3cebb0ab25203b75824445dbcd3bcf4d3bbfb0133831b132e4ca8b0084bfbab2ba2aea89c4e9f2a55835dff11156dc9beb1a220dec415012990fb664e6fbcd4e4cf403c9d9ebecfe8802a746b1f5d3537957bbfe659982dcaabdb2763d860dbf260973940c050c05e0beee3c67bcb77e87efdddb92d16971e0a24343759cfc03f9ca3d3dc1e95db69ca7ceb3dd15873aaefcde0c69a9d14b4659e6310d65c993517e6aee617edc8f0699992b281bc28c16e710db69180ad5b20b17cfb11e26da6f4ca0ce89b53a323a5ab2e2c9669808fa148eb2ef39bff47dece66aa40ee996bbeac36896711904ed5efda8f5ab9f5cb7c4f17703a57e7732b983be07b8c2d843378ad18ab268259ceafcc56dc1de1be2219276aa8b86b83e32dd2fa8fef6ea65f128f8432619894f6b14005661443ce4d2075e11cecc832b8c0781acf60fd183390aa754c17ec5398a468d12394a4a9be6b3ecb4883ecb7a0422bc2247588ae56334a20feed7988c7139264fcae6cc49819efa0d33b31432180d91177b4611424e9c3167f78a00bf8fd4ee035639de9e1315e6a1621b1177217c738104bcd96b0ffff997c24565058d72271f72f079e8f8634e95b7632505952f077a77115684268679ba0a3441ebdfd0b371c75d346a5ee5a7ddcd72ec9ef2747716c3b643beb2d083b82b64fdda86989a70642fd4e0d5428d7bc9194e8dd354cfba89a1e8ae414e4a5fb93cf9b3e85c5c03e27d0c0254264516de4743f74472cf067adc7c6646973e25c128ec1e08b77656e370c654a8872fddb9674803ef8629342372464fbe1e5171473c1beb44479fffd9789cc13434ddca86c8b502c8fc697b7c2487354c92d90cf0fec010bfdfeff8f195944996776dd3c120bb631872bee5097da1f6340b62e300d90b49110a1fe8f317312b645b8873b70a241076f3bae9d1a486d2a1ddeed28e60a4131f672d6854573530260e65931a9fef23b804b0ae2d3217825b8c6f53a2bc44e3f3d297c431f699456202194b237c14e32f2245506dca57ffa79ba7903b840e946da5528d9efd643f9cbe392d8a77ab57c1b8a6ff39f780524ac4a30c58581fe726ff7cea7d16b7cfbe1db762698eef05cab80d7a29bced58a322affa5111819da9273c369e82d690f4f98778e4b6a5d905735c853f792cb018101ea1f6bd55a600987bd5d47f290a413621f6f0bf6fd56f024f57c2b2bbd44b06be8f32ac65a0ff8d692b599706a8c8c33d6493a93cf2edee88eeeedcfb86728eba93ed4b6f267818c92029456173fe921c31b08304975192b715f7c59a6a360baf4af27d44ae560305f4341b406d868e9277105adaa835dc8975c1de3d9964c91d536bb32c615ddf547a94fa7c99215599a306b6ee5df185e9130a4338e7e2946911d6243ba3b81e269c8a4b696b158e3d09ac4cfc3010e12757497769743f9656fc72ef7d39c9e8d819f0b3df79b698595a707e5db4172e79f4fcd39add5538d7c296aa7aced57e29d4d85e274b3e4a007d6d3eb07412213dffece141896177b2b3dce2902c729fe4c0b4135a02f2a58ce7ba444b28fbcf530576bc2e6a598b95db32ea735731cc0631d5ceb410fa901d9dd776a3a913ce94e307d5fd4d3f06e8fe8d7fc745aa64456c5fb530a30ea16c74fa354e5fada14dec92709520914f04646ecb6f48dff092918e9486ce9f14d63613a8800cabc07e8218bc518dff5f9b8375d16a9a8825d47b0a5528d310d29cde74261645d41bc45df735f1b0a484399a7c12ff0067106ddd2a3c6f9d436b08201cfa34b2967308f741101d0b480461cb6950601b973e497cae7ea89082a42a719c6213353e7996054b07363b0525ebfc17b4625186aef2aaea9519fddf6f84fb3eab8eaaf01bce969f305ecee6e5db3b017cd21d1964aedbfd5121de479ba43c2a883952e5189e1db83566a4c696b2e53fd92c722877b9d01b2d8bed8710eefe6a22ef3e103f472feec2275732a98b6eae58134cd04f043366dd66f247c77ecdb53359cdb906e984e68c6649b42c4262"], @ANYBLOB="fbffff2bf0ff5400"/18], 0x3}}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r5, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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"/441, 0x1b9}], 0x3) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xfffffef1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x80) [ 395.555298][T15712] binder: 15709:15712 ioctl c0306201 0 returned -14 [ 395.583817][T15712] binder: 15709:15712 ioctl c0306201 20000240 returned -14 03:47:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 396.076622][T15730] binder: 15727:15730 ioctl c0306201 0 returned -14 [ 396.091703][T15730] binder: 15727:15730 ioctl c0306201 20000240 returned -14 03:47:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000408, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 03:47:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:17 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, 0x0, 0x0) 03:47:17 executing program 4: futex(&(0x7f000000cffc), 0x8b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x2000000) 03:47:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x400000000}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000a80)=@isdn, 0x80, 0x0}, 0x6}, {{&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/113, 0x71}, 0x9840}, {{&(0x7f0000001240)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/160, 0xa0}, {0x0}, {&(0x7f0000002800)=""/153, 0x99}, {&(0x7f00000004c0)=""/121, 0x79}], 0x4, &(0x7f00000029c0)=""/234, 0xea}, 0x7fff}, {{&(0x7f0000002ac0)=@phonet, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002c80)=""/185, 0xb9}, 0x5}, {{&(0x7f0000002d40)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/151, 0x97}], 0x1}, 0x9}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000004340)=ANY=[@ANYRES32=r0, @ANYBLOB="c6303b006c87ef35e3d9d7eb0c36db57011ac352e61eee1cec723a2c576c2f8850c48e112509237202024e45c8c38c8a3c695fca43ce222d10bc7b836871a8e52213408dab0c1ec81787c5c05396fd098a14f1ba4fe2a386c1bb4b1c2dc4a09c41e213c00f6c882d9dece365b559401fbe04e54a0c923793264f06913e6f674e9c452b970657b31ee4d93781a9ca72046babebe2b0c9a8bc80df1f7cf009ef747534d0c18fc2cb2b72b279b9ae8c3acb448eae8650421822c2bc6c46b7747b1700194b6a3ff770c8ffd120ebeebd153bb668c1a0bbd6a33a59019417f61e2363518e4b4cd53b321cf88fa161c9529a245cdc8f44d92adf6af8b560f5cb13e3637d6f26b76756b39c2a59de9a0a9e56a6c9a79af4b9a89dddfb3c971fae4c5aa92acece4ee1bdb1e493591ccca2ef6d409b78dab84b303d1eaaf9af6e638b0d6c74aeaaae843377976da7ace4d02ea1af2733db943ef63e7bea49a53765053d0d8cef03aa5e167bfc918c727c137b15ab7fdaba36f05e6c71c74024c73ba2e9df28b02ea0c70bdef0a98f34c1ed912e2df311106f11ca47a7d57bb1c3cd1c8d7cf434572a74656920007b8e06b5a22fd0f91536dbea97212d95491417c4cb13dca30f60da0234e536835318b1c2ef69b9dcbfea825f3a68e2affe710362b9c26d8f4d32409835f706b6d90b213b40d4382e84fb81f507a31b71d63dfc73de00a07a24dc3ede98b1301e4005e44ccd5d5b3c5277b358f6f7c793296068f52898bf6e03c84d64b559991e8c3a1a6c63676c1347c588ae0bd01e35dde994e9c8337cee5dab2f8733d608ba2320aa073b5fc625cf3aadd7c3f8c51554fefa299fc068e06234471c2e2c2155c234b26e415d3e275041eac94c33686fccb9cae84304656f0debe03f13d06f731686ec8bc82c2548887b726fe938eead25129d3396775041339ebb7b30935e2f9a3c055acb251891e6efa60d18ec2adc4c98bcca563e70b20cd5454873c5bf1979afc97004ebd1e1885a6d6d39c80b868ae55620293e05fe0757f0d913594dbce6801acdd4be2d197b30e20941f178e6d556fb2b2bb4496dfe468b43c03315cdea8fec88ada9442e28aa2c80f6bb74ec8b87bc58c8e45e7488bcb7aac9bff799b4144f260a644f2730a4842408efb39ab3a4313890c7b8fb5e939ac3e128c9aed63eb2e783ed90587ea1845a679dcebe1a18ecbeea9edd364b87a1048b60231ff4ef08987f458a0f7a57edf0b90c275eece1e3ffc8ea870df69f23a87a30c6c28b985cba5583a0dd4ac636117d317b692384e9789834a1d4f336ffa5e781a696590ae2cbd5459e831cc8ddb2baab7ea8d4d2a20a97d9b20795904dbd89157eb74ec8ac38e002be4b6d42c6a3b5e48c003d41ea6b59e413820f2921794b2a719bba4cd3e84e5631160e7768bb21bb2fc96ea94e375b51b26270a6a5487361f2f475db0c9d5bfbad5fa3da312365eec85fe10254b79c8a4d548f03ac61662d3fc8053c49acc281c11e5e0b1cf213ac6ef60ab77608e978f49d59713cba1c0fa58da6d5e0710dc8f53df6df89a266fc999fecd2b191e72467b435bc7f1d0b97bb0fc3ff65b91b46db2faefee098fc52f34c7f5ce431313eb48dd8c8bca24a522bb498064d476635fdced27e4e2e789966a3ab208125edd272fd897a4e69e786ec9f89ce8c24d75f5a710ea10ec39dad96fb945433828b3e2601b764e43fdedb0040dc8740e367d60103497f5999f0f2844a7019b0ef3d4672cc364e82da742558a3872accb3987f2c9bfd81990ab13ad797ad5780695f9f9765b5caf2994e80eaca0573031a5d73e2985116b3be349e3d3e8c31a663dcccaeba35e923a4e82407410eaa7259a26e6bd6aefc70e62971b3c9ad5c5d72ebc77fc8754fe52f4c6168547624854bc616916fcd3b7b7dac94f57be4a1000b255735f48482234ad57cc9842fd85a5f3b2b528f5f613d76d97f84479780582d9e7abb63ec65a9a957f3eba760ce82ef968065e5325decc491feedde58c93fdd0e1e305c626d422f5642473ce25e0705127e2bf19f0ed4b607b64406b8758c77c3b495a5f8b0a59923c0cc8aea9decb2c8154da158a5559e19063aed21c08609cdefe3f7a26c27d4cab7b40fe3cdd30673dd23bc926d60ff0cf08e7b2870a264e7395320d2fd27818b58d031a1902255aefd22b42d937cac44cc28bf9ca77e9bf3107b77299fd43dd4b2558c06386a86659b171bfcfb8cd98975254583f915cc3db6f07affcf75bc119b0c6e168044abc91dde8e40de0a06ea7b2ad6fdc55ce09c787901167384f6df9e886a578cc8d8f43b0fa61c96abbb4a581bf03f5c06d3b6d9cfb5a588389edbaa86848ff7e9887fe1930cc2a3a418478a83e02d1aaf6098196f0857bd55c5e9005fd7d76b678a1dbf566f1709d3378b93b3393b4ca6045c273beb10a92cf0e2330e93efee2a793360ad1f2be04dc3c608051e2fa8bd9ee443a4d949a2ec160d4be7cecf1df17da325691447a0f144bad3f36f07ec3ecabdb676f0e48b65e9ddc6d88c433b709ba06d305b603065f2c1d9e6dbad37e1d74785f88f1749b4957ac341aa62c1e1c0c52e22536585d513ae93d5feda18129f5b88450d0546dd8be571f413c4f68339c42f59fcc6a5b728a7ccd7674e6a7fd501ffe118ac6f4facad4b6a52eefc99da27f7e832bac696e9a34a6083935932785987d545304a01e0b9537e11cb18c932b88c1cdc159cfd541c28b48eebc2f3598dad40e0e954f9dd3265545e2ede03f3eb1558e2f5e6e05318e12f290e695437a31fbe1a601be5229e82f9faebfbd1edc39dc8b37035b44460a3dcf9e0a95f35e525f574110c69f32a1a7d0992c2eb960560d20a5d895e4bce227802d0a94e82a095d8be6d1a6abe659e5762d68356d8d99ede22139d334d160b6f272024b820f2e2b56d3dbf376a043f05d77bbb0b97defecaff478dd52b582e59e7a313677be386faad3e027288dbc4e17657806eb0b861c3332fc5cce658d555ecb5311e57037ce469e09478bd9c85f094fabbca7ee2f18d5d401d12b394e79f8a25eb241a667fc81ad44be9ec98a16d14b127d5dfbd26b094e2d8c89cd4c9cef63b6aed06066be2a9e24d0684b9b73fd08ae74ecce302d38563e36ac51be956cf5dfd53bf048622c6f9762a8c1c36c0bd69ec745b221f4994182677c5bf16fcfb105e7fc0cc6125330a6075104a345ab5c8954ee76e8301a0fb969c61dcb29a5f9c9f858e3a1ea85c8e3db678fb2eba9271d8000cd8667ece1e45f2d625efbb16b9459a5fac112972d64cd87ff41a6896620b34614ce2c5e87bd1af26957e7266859ae7ece5a2c4d30565bd7ee9f7139d8c7c5c0967fa9346950dd29079586707df6bc70ea1fd1b96269fcdb92523920b62a6ccbec434d744994586399782609dcbdc931204da81a5a6f5b28c77d591024c06abe94889d32da0a95e977f6da0482dc3c731670234b5dbbf63ae0dc8dd93edbea3b2365f68a84e9976ae50911f8d3a09bc50cbc41b7ff5b28f1811863c44ccf7d87bb7edb9dd8c8f60ced77cb954179b64cee2f8647adf190631193d28c714da91374ce93e3bcf08b59139fec24577bbefdb95ae63eaf5f574cfc63111c83da09271a392019d436e91cf5a2a57c8fcc610a42b9681dfe9036790591eeaa7128b335efd75c499a88b903923d013483fc1411a874257d6f5e5c4d940128805287031ec4cb8ac225c63b18ba061fae346dbfffd9f3fb90160ffcb372ed1bb3e8a3644a1ac80202f335aece3c4944ab2301bc6bea179a11504d0b08b799c59db59d7737110ced9c9327c200abbd0bd3416b3818f6f423611301232395b61e4f7c89c747f922b36637ba7a5bc8362b592c50b16a62e1ac9483cc757123341261a4905889e4259225c9c086523ffb110612ff0113efa7f078d28757bf87045916a7bec7b22f5928c4652a7b5dafbe834633101e197a22e922088d68c6e4978cf4d2cc688d3de6833c6ce60bb8fb81c006fc6916097f8c659fa146dfbad051ae8c1b5702133c3752b990560c926a75519fa05914bffbf23a9cefa1d9bda6d7d86dcde8ea9af9e88e2526d9146a18cdb7124a5adfe6b0bf4143a6012dbadba5bf46bbc47e7d8641e0dd74653d6f027eae874832495f1b2d6f3f67b0cdae0fd2c2badbe657d13a166621de6b3f74509ec02df7640c45814d5a1de2feffa0902ce6d49b172bde8890288cc1e02a3ab92c368c36390aa157daec15c024860cbe0166e183992cadadb065e628dc301ee9594dff2f6dc178c79c3fec9514e94ddf991b35d68dbd95ac7ceaca737860dfb66118dbf2e421ee32429486706b656c3a3d87c2122d4b317f70bd7e1baff84dd0069060a57e9175497f9e729795d78cc15f461cd669e0c1784b1a3e68a743cd22abf6eff5d1a3f032b28ef0ab20b92e264cf1d2dd497c997e9fd5e78d7afafd4d930c3fd97ce6a3e5d0273d848e1600dd29da3aec5371fa2fe0c9257a9f1e235d71223f032cceb136ee5fdf7dbaee32f0f1191faffb6839266776f9b820b45fdb111756b6fff7f0455f83d5703ab8d375791f22b4fa72d1011c0f7fe41e17b9b6bfcb2b325b0705c284203e9cce939d27d4d01f2faa73256969dddf5b7ef2b25602ac89f33ff516b547c1b62333e4e7b8aef7038ca694e285b528d3145725950adb6c6c911e96a499cfedfdcba69c0685c4a08565ba2c2b10e5b8cc30fab73d926586b412d387be231c15314a81112b81e2683500fe08859adba568431df80787e265691bd77dd07968c3fcb5c056cac17bc29e9ecd83c3496b86f42b268e68dcb99334f2fb52f6cc67c1ee74f631ef94da97ef0c420a148a791c841380370182ad30d693f25cf17685707a6c5a49ee750c0d3d96053ffaf889a7e0258a4d58a85290c978b4bb642ca0f466ab91de6b37b37ed53f918af1d8d384baae94a4c1913c9b697d84d13390525fb58101d8e35f65f686efb0c88d57a361a4a3ca2da61bc65c285179099e42d8994590291d029528cd88704b012f2d2b79a01162a8358678ccee6798ec262fefd31bc21407c5c1f1b00773cced2f44c25cbfedf5e15532cc50e6ce706b83f5fd0b78f0c707753ef9571a4d3f81357e89023e1d7aaffa84cfd19792c266c011dac83a7d3c6bc790a3283336c97d1a4d5433477526901d3bea57b582c0abb615dde2075f9082b896547bb5624e3cc27779d5dd9e6d4401f6254b3d5d9db7439428fbb429fb1d0860d8ba073084c3c53c80c3d911a0277c9a7bec030f49f562bd878a4310eea873a5aa357e12e54e2a04014881d1a68f2c0e33f35852163570d1f0010938b49571fb7b6787ccff8ef1145977da549f35366471a4f9a3be620f7bb782ef6f91fd2ea724e5fc13c9a23ff5c9d241665478e813bc8f7478783b568ea0f0f9daca362dbea59b71d8ea79fd323f6fb729d9ddce758d1cf", @ANYRES16, @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC], @ANYBLOB="fbffff2bf0ff5400"/18], 0x3}}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r5, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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"/441, 0x1b9}], 0x3) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xfffffef1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x80) [ 396.636318][T15747] binder: 15744:15747 ioctl c0306201 20000240 returned -14 03:47:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x0) 03:47:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) [ 397.092120][T15766] binder: 15761:15766 ioctl c0306201 20000240 returned -14 03:47:17 executing program 2: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x5000000) 03:47:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:18 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001600), 0x1b7, 0x0, 0x172}}], 0x2f4, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) shutdown(r0, 0x0) 03:47:18 executing program 4: futex(&(0x7f000000cffc), 0x8b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x2000000) 03:47:18 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, 0x0, 0x0) [ 397.772112][T15780] binder: 15777:15780 ioctl c0306201 20000240 returned -14 03:47:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:18 executing program 2: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x5000000) 03:47:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) 03:47:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) [ 398.378927][T15802] binder: 15799:15802 ioctl c0306201 20000240 returned -14 03:47:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:19 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000002880)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 03:47:19 executing program 1: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 398.863045][T15818] binder: 15813:15818 ioctl c0306201 20000240 returned -14 03:47:19 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffc) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 03:47:19 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, 0x0, 0x0) 03:47:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x48884) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0xe9}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xe9}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x74}}, 0x0) 03:47:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77682a85, 0x0, 0x1}, @fd={0x73622a85}, @ptr={0x66642a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x2, 0x1000000, 0x0}) 03:47:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000003540)={0x10}, 0x10}}, 0x0) [ 399.309656][T15832] ===================================================== [ 399.316781][T15832] BUG: KMSAN: uninit-value in string+0x522/0x690 [ 399.323135][T15832] CPU: 1 PID: 15832 Comm: syz-executor.2 Not tainted 5.6.0-rc7-syzkaller #0 [ 399.331817][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.341881][T15832] Call Trace: [ 399.345209][T15832] dump_stack+0x1c9/0x220 [ 399.349570][T15832] kmsan_report+0xf7/0x1e0 [ 399.354197][T15832] __msan_warning+0x58/0xa0 [ 399.358718][T15832] string+0x522/0x690 [ 399.362712][T15832] vsnprintf+0x207d/0x31b0 [ 399.367143][T15832] audit_log_vformat+0x583/0xcd0 [ 399.372111][T15832] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 399.377939][T15832] audit_log_format+0x220/0x260 [ 399.382816][T15832] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 399.390442][T15832] audit_receive+0x18a4/0x6d50 [ 399.395215][T15832] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 399.401277][T15832] ? netlink_deliver_tap+0xdba/0xea0 [ 399.406572][T15832] ? kmsan_get_metadata+0x11d/0x180 [ 399.411898][T15832] netlink_unicast+0xf9e/0x1100 [ 399.416748][T15832] ? audit_net_exit+0xd0/0xd0 [ 399.421442][T15832] netlink_sendmsg+0x1246/0x14d0 [ 399.426393][T15832] ? netlink_getsockopt+0x1440/0x1440 [ 399.431760][T15832] ____sys_sendmsg+0x12b6/0x1350 [ 399.436718][T15832] __sys_sendmsg+0x451/0x5f0 [ 399.441322][T15832] ? kmsan_get_metadata+0x11d/0x180 [ 399.446514][T15832] ? kmsan_get_metadata+0x11d/0x180 [ 399.451735][T15832] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 399.457536][T15832] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 399.463609][T15832] ? prepare_exit_to_usermode+0x1ca/0x520 [ 399.469335][T15832] ? kmsan_get_metadata+0x4f/0x180 [ 399.475483][T15832] ? kmsan_get_metadata+0x4f/0x180 [ 399.480598][T15832] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 399.486403][T15832] __ia32_compat_sys_sendmsg+0xed/0x130 [ 399.492064][T15832] ? compat_mc_getsockopt+0x19a0/0x19a0 [ 399.497605][T15832] do_fast_syscall_32+0x3c7/0x6e0 [ 399.502640][T15832] entry_SYSENTER_compat+0x68/0x77 [ 399.507742][T15832] RIP: 0023:0xf7fa9d99 [ 399.511816][T15832] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 399.531602][T15832] RSP: 002b:00000000f5da40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 399.540044][T15832] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001300 [ 399.548994][T15832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 399.556984][T15832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 399.569035][T15832] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 399.577712][T15832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 399.585698][T15832] [ 399.588017][T15832] Uninit was created at: [ 399.592257][T15832] kmsan_internal_poison_shadow+0x66/0xd0 [ 399.598025][T15832] kmsan_slab_alloc+0x8a/0xe0 [ 399.602722][T15832] __kmalloc_node_track_caller+0xb40/0x1200 [ 399.608632][T15832] __alloc_skb+0x2fd/0xac0 [ 399.613072][T15832] netlink_sendmsg+0x7d3/0x14d0 [ 399.617925][T15832] ____sys_sendmsg+0x12b6/0x1350 [ 399.622870][T15832] __sys_sendmsg+0x451/0x5f0 [ 399.627463][T15832] __ia32_compat_sys_sendmsg+0xed/0x130 [ 399.633003][T15832] do_fast_syscall_32+0x3c7/0x6e0 [ 399.638023][T15832] entry_SYSENTER_compat+0x68/0x77 [ 399.643118][T15832] ===================================================== [ 399.650055][T15832] Disabling lock debugging due to kernel taint [ 399.656196][T15832] Kernel panic - not syncing: panic_on_warn set ... [ 399.662779][T15832] CPU: 1 PID: 15832 Comm: syz-executor.2 Tainted: G B 5.6.0-rc7-syzkaller #0 [ 399.672825][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.683131][T15832] Call Trace: [ 399.686427][T15832] dump_stack+0x1c9/0x220 [ 399.690758][T15832] panic+0x3d5/0xc3e [ 399.694677][T15832] kmsan_report+0x1df/0x1e0 [ 399.699182][T15832] __msan_warning+0x58/0xa0 [ 399.703682][T15832] string+0x522/0x690 [ 399.707678][T15832] vsnprintf+0x207d/0x31b0 [ 399.712223][T15832] audit_log_vformat+0x583/0xcd0 [ 399.717176][T15832] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 399.722976][T15832] audit_log_format+0x220/0x260 [ 399.727853][T15832] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 399.735481][T15832] audit_receive+0x18a4/0x6d50 [ 399.740389][T15832] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 399.746470][T15832] ? netlink_deliver_tap+0xdba/0xea0 [ 399.752756][T15832] ? kmsan_get_metadata+0x11d/0x180 [ 399.757960][T15832] netlink_unicast+0xf9e/0x1100 [ 399.762815][T15832] ? audit_net_exit+0xd0/0xd0 [ 399.767509][T15832] netlink_sendmsg+0x1246/0x14d0 [ 399.772549][T15832] ? netlink_getsockopt+0x1440/0x1440 [ 399.777921][T15832] ____sys_sendmsg+0x12b6/0x1350 [ 399.782871][T15832] __sys_sendmsg+0x451/0x5f0 [ 399.787474][T15832] ? kmsan_get_metadata+0x11d/0x180 [ 399.792677][T15832] ? kmsan_get_metadata+0x11d/0x180 [ 399.797873][T15832] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 399.803766][T15832] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 399.809923][T15832] ? prepare_exit_to_usermode+0x1ca/0x520 [ 399.815639][T15832] ? kmsan_get_metadata+0x4f/0x180 [ 399.820754][T15832] ? kmsan_get_metadata+0x4f/0x180 [ 399.825873][T15832] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 399.831704][T15832] __ia32_compat_sys_sendmsg+0xed/0x130 [ 399.837249][T15832] ? compat_mc_getsockopt+0x19a0/0x19a0 [ 399.842787][T15832] do_fast_syscall_32+0x3c7/0x6e0 [ 399.847821][T15832] entry_SYSENTER_compat+0x68/0x77 [ 399.852922][T15832] RIP: 0023:0xf7fa9d99 [ 399.856985][T15832] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 399.876582][T15832] RSP: 002b:00000000f5da40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 399.885806][T15832] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001300 [ 399.893767][T15832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 399.901826][T15832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 399.909795][T15832] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 399.917756][T15832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 399.927177][T15832] Kernel Offset: 0x27e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 399.938811][T15832] Rebooting in 86400 seconds..